---
title: "How to choose the site?"
canonical: "https://www.techtime-initiative.com/space/EasySSO/1474639/How%20to%20choose%20the%20site%3F"
format: markdown
---
You can use the list of the controllers returned by **nltest** (See [How to determine existing AD sites](https://techtime-website.atlassian.net/wiki/spaces/EasySSO/pages/1474675)) or the alternative is to run the DNS query using **nslookup** command.

```shell
nslookup -type=SRV _ldap._tcp.dc._msdcs.<your domain>
```

Example:

```
nslookup -type=SRV _ldap._tcp.dc._msdcs.domain1.mycompany.org
```

This DNS lookup is what the IOPLEX Jespa library is doing internally and should return the same records as **nltest** command.

Then for each name, you can run the following on the server.

```shell
nltest /server:<hostname> /query
```

Example:

```shell
nltest /server:dc01.domain1.mycompany.org /query
nltest /server:dc02.domain1.mycompany.org /query
nltest /server:dc03.domain1.mycompany.org /query
```

The above command clearly identifies which Domain Controllers are actually reachable from the server.

You can then correlate this information to the site names and choose the site to be used in "AD Site" parameter in EasySSO config GUI.