Net Logon Service Parameters

The Registry path with entries for the SunLink Server Net Logon service follows:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters

• LogonQuery REG_DWORD 60 - infinity

  Specifies the interval, in seconds, at which the server checks if linked clients are still active.

  Default: 900 (15 minutes)

• Pulse REG_DWORD 60 - 3600 (1 hour)

  Specifies the interval, in seconds, for sending update notices when no updates are occurring to the master user accounts database. This keyword applies only to a primary domain controller and is ignored by other servers.

  Default: 300 (5 minutes)

• QueryDelay REG_DWORD 1 - infinity

  Specifies the interval in seconds that a client can wait before responding to the server's inquiry about whether it is active.

  Default: 2

• Randomize REG_DWORD 5 to 120

  Specifies the period, in seconds, within which a BDC randomizes its request to a PDC for updates after receiving an update notice. This keyword reduces the chance that BDCs in the same domain will simultaneously request an update.

  Default: 30 seconds

• RelogonDelay REG_DWORD 1 - infinity

  Specifies the interval in seconds that a client can wait before logging back on to the server after the server has been stopped and restarted.

  Default: 2

• Scripts REG_EXPAND_SZ

  Specifies the location of the logon scripts directory.

  Default on primary domain controller: %SystemRoot%\var\opt\lanman\shares\asu\repl\export\scripts

  Default on backup domain controller: %SystemRoot%\var\opt\lanman\shares\asu\repl\import\scripts

• SSIPasswdAge REG_DWORD 86400 (24 hours) - infinity

  Specifies the time, in seconds, at which a backup domain controller must change the password that it sends to the primary domain controller to verify its eligibility to receive user accounts database updates.

  Values: 604800 (7 days)

• Update REG_DWORD 0 or 1

  If this value is set, the server synchronizes the user accounts database with the primary domain controller every time it starts. This keyword applies only to a backup domain controller and is ignored by the primary domain controller. Note that full synchronization is a very time-consuming operation.

  Default: 0 (do not synchronize)