?
Solved

Joining a Windows 2000 domain from different subnet

Posted on 2006-06-12
6
Medium Priority
?
720 Views
Last Modified: 2010-04-13
Hi, my company has got 2 different network subnets, call it zoneA and zoneB, and they are separated by a Cisco PIX 515E firewall.  There is a Win2k domain controller in zoneA.  My question is:

1) Is it possible that a user from zoneB to join the domain in zoneA?  How?

2) Do I have to open any ports on the firewall for the above purpose?


Thanks in advance.
0
Comment
Question by:hoggiee
4 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 200 total points
ID: 16891842
as long as your machines can ping each other via name then yes you can      no idea how to do it with a pix but connectivity is your biggest concern
0
 
LVL 35

Assisted Solution

by:Nirmal Sharma
Nirmal Sharma earned 200 total points
ID: 16892807
>>>1) Is it possible that a user from zoneB to join the domain in zoneA?  How?

If there's no issue with connectivity and gateways defined correctly then you can join machines to domain from different subnets also.

2) Do I have to open any ports on the firewall for the above purpose?

Many. Yes, you have to open many port for domain to member conversation. You need to open port 88 for keberos, 53 for DNS etc etc.

Make sure your clients point to correct DNS server.
0
 
LVL 9

Assisted Solution

by:dooleydog
dooleydog earned 200 total points
ID: 16894541
if you are using two segments, with separate IP subnets, it doesn't matter where the DC you want to connect is, as long as you can physically connect. If you are using slower links, you may want to have additional DCs for speed.

in short, separate segments has nothing to do with DCs and joining a domain.

Good Luck,
0
 
LVL 4

Assisted Solution

by:ansh_gupta
ansh_gupta earned 200 total points
ID: 16919094
Till the time we have connectivity for protocols like rpc, kerberos, smb, dns etc we don't need to worry about anything else. If the pix is able to forward the traffic then nothing has to be done. If in case its not happening, then look for rpc , kerberos, dns etc communication whether its blocked...
0

Featured Post

Upgrade your Question Security!

Add Premium security features to your question to ensure its privacy or anonymity. Learn more about your ability to control Question Security today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
Currently, there is an issue with being able to copy values from an external application to a dropdown list in Project Web Access (PWA).  The standard copy and paste methods don't seem to work properly. Here is a way to accomplish this task to s…
this video summaries big data hadoop online training demo (http://onlineitguru.com/big-data-hadoop-online-training-placement.html) , and covers basics in big data hadoop .
Despite its rising prevalence in the business world, "the cloud" is still misunderstood. Some companies still believe common misconceptions about lack of security in cloud solutions and many misuses of cloud storage options still occur every day. …

807 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question