W2K Domain Mixed Mode behide Firewall

[Gustavo Montanha]

I have a migrated W2K Domain with 6 Sites. 5 of them are in separetade WANs
just with routes. And operates normally. But one Site has a firewall between
the sites. The syncronism of the domains occurr OK, because there are some
open ports (sync ports) between the DCs, but just for the DCs IP. In this
Site when I want to add a new workstation to domain, is Ok, when the OS is
Windows 2000 Pro, or XP Pro. However, if the machine is a Windows NT 4.0
Server or Workstation, dont works. I have a DNS and the WINS Services
instaled in this DC. In NT machines, when I try to add to this domain, I´m
asked to add the administrative account, but after it, I receive the message
that the DC for this domain was not found. And I think... If I´m asked to
add an account to add the workstation, The domain was found?!? But I think
that the workstation was not finding the PDC, in my case in other site
(behind the firewall) with a PDC emulator, without direct connection with
the workstation.

There are any thing that I can add this workstation in this site?

What do I do?

Thanks.

 

[ptwilliams]

Firewalls in the middle of a domain are a real pain. It's a pretty large
topic, with fierce arguments on the pros and cons. Basically, the way I see
it you have two main ways: open all necessary ports, or tunnel between
sites, i.e. IPSec, or VPN.

For info. pertaining to what ports need to be open, etc. check out the
following kb article:
http://support.microsoft.com/?id=832017

Search ms' website for info on AD and firewalls. There's a good white paper
that will help you.


Paul.
_________________________________

 

[Jimmy Andersson [MVP]]

Q224196 - Restricting AD Replication Traffice to a Specific Port.
http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q224196

Q179442 - How to Configure a Firewall for Domains and Trusts.
http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q179442

Regards,
/Jimmy

 

[Tommy Vercetti]

I came across this article some time ago
http://is-it-true.org/nt/nt2000/atips/atips145.shtml

Hope this shines some light on your issue.