Ports used by GPO/client through the FireWall

[nattis]

Info:
There is a Firewall (FW) between the client and the DC
(with GPO).
Problem:
When client logs on to the domain GPO is not applied.
Question:
Is there any additional ports that have to be opened in
the FW for GPO-traffic to be successfull?

Thanks in advance,
/Nattis

 

[Judith Herman [MSFT]]

The first thing to look at is whether or not you are filtering out the ICMP
packets to disallow "pings" through your firewall. If so, you will not get
policy until you set your client to show a slowlink threshold value of "0"
which will in essence turn off the check for slowlink and assume the client
is always on a fast link.