Tweaking your domain controller synchronization  
 
Domain Controllers by default synchronize every 5 minutes. When you synchronize over a wan link this could be a problem if you have say a low throughput on your link or if your network utilization is high. So what can you do about it? You can schedule your synchronization during low utility hours. All you need is a little bit of registry editing and a batch file.
 
 
Domain Controllers by default synchronize every 5 minutes. When you synchronize over a wan link this could be a problem if you have say you have a low throughput on your link or if your network utilization is high. So what can you do about it? You can schedule your synchronization during low utility hours. All you need is a little bit of registry editing and a batch file.
 
  1. Create a script file with the following value. Let's call it Reg1.txt  
 

HKEY_LOCAL_MACHINE
  \SYSTEM
        \CurrentControlSet
           \Services
            \Netlogon
               \Parameters
                \ReplicationGovernor    Reg_DWord     50

  
  2. Create another script file Reg2.txt with the ReplicationGovernor set at 100.  
  3. Now create two batch files batch file Reg1.bat with the following text:  
  net stop netlogon
       regini reg1.txt
   net start netlogon		  
     
  4. Create reg2.bat as follows  
  net stop netlogon
       regini reg2.txt
   net start netlogon		  
     
  5. Schedule reg1.bat to run at 12 a.m. and reg2.bat to run at 7a.m.  
 
This will keep the DC synchronization at 100% from midnight to 7 a.m. and at 50% from 7 a.m. to midnight. You may have to also increase the size of your change log depending on the number of changes you expect per day in your DC's SAM database.