
4mepg (4mepg) asked a question.
Hi,
If we have 4 domain controllers with active directory synced across all 4 (2 servers in 1 location, other 2 in a different location). I want manually do a full import, which domain controller does it sync from first?
I recently created a security group to add users to a specific application and added approximately 70 users. The first 5 full imports only synced the new group, but not the users in it. By the 6th sync it finally synced the users added.

Thank you for posting your question on the Okta Community. The Okta AD Agent connects and pulls information from the Domain Controller(DC) which is connected to the member server. You can check the domain controller that was connected during the request in the AD Agent logs located at C:\ProgramFiles (x86)\Okta\Okta AD Agent\logs\Agent.txt. You can also check the DC information with command prompt using the command nltest /dsgetdc:domainname. Okta does not control this connection and you will have to manually configure your member server to use a different DC based on your requirement.