Final DC Discovery Retry Setting for Background CallersID: oval:org.secpod.oval:def:18987 | Date: (C)2014-05-29 (M)2023-07-04 |
Class: COMPLIANCE | Family: windows |
The Final DC Discovery Retry Setting for Background Callers machine setting should be configured correctly.
When applications performing periodic searches for domain controllers (DC) are unable to find a DC, the value set in this setting determines when retries are no longer allowed. For example, retires may be set to occur according to the Maximum DC Discovery Retry Interval Setting, but when the value set in this setting is reached, no more retries occur. If a value for this setting is smaller than the value in Maximum DC Discovery Retry Interval Setting, the value for Maximum DC Discovery Retry Interval Setting is used. The default value for this setting is to not quit retrying (0). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0.
Fix:
(1) GPO: Computer Configuration\Administrative Templates\System\Net Logon\Final DC Discovery Retry Setting for Background Callers
(2) KEY: HKLM\Software\Policies\Microsoft\Netlogon\Parameters\BackgroundRetryQuitTime
Platform: |
Microsoft Windows Server 2008 R2 |