Solved

Joining a Windows 2000 domain from different subnet

Posted on 2006-06-12
6
710 Views
Last Modified: 2010-04-13
Hi, my company has got 2 different network subnets, call it zoneA and zoneB, and they are separated by a Cisco PIX 515E firewall.  There is a Win2k domain controller in zoneA.  My question is:

1) Is it possible that a user from zoneB to join the domain in zoneA?  How?

2) Do I have to open any ports on the firewall for the above purpose?


Thanks in advance.
0
Comment
Question by:hoggiee
6 Comments
 
LVL 48

Accepted Solution

by:
Jay_Jay70 earned 50 total points
ID: 16891842
as long as your machines can ping each other via name then yes you can      no idea how to do it with a pix but connectivity is your biggest concern
0
 
LVL 35

Assisted Solution

by:Nick Sui
Nick Sui earned 50 total points
ID: 16892807
>>>1) Is it possible that a user from zoneB to join the domain in zoneA?  How?

If there's no issue with connectivity and gateways defined correctly then you can join machines to domain from different subnets also.

2) Do I have to open any ports on the firewall for the above purpose?

Many. Yes, you have to open many port for domain to member conversation. You need to open port 88 for keberos, 53 for DNS etc etc.

Make sure your clients point to correct DNS server.
0
 
LVL 9

Assisted Solution

by:dooleydog
dooleydog earned 50 total points
ID: 16894541
if you are using two segments, with separate IP subnets, it doesn't matter where the DC you want to connect is, as long as you can physically connect. If you are using slower links, you may want to have additional DCs for speed.

in short, separate segments has nothing to do with DCs and joining a domain.

Good Luck,
0
 
LVL 4

Assisted Solution

by:ansh_gupta
ansh_gupta earned 50 total points
ID: 16919094
Till the time we have connectivity for protocols like rpc, kerberos, smb, dns etc we don't need to worry about anything else. If the pix is able to forward the traffic then nothing has to be done. If in case its not happening, then look for rpc , kerberos, dns etc communication whether its blocked...
0

Featured Post

How to run any project with ease

Manage projects of all sizes how you want. Great for personal to-do lists, project milestones, team priorities and launch plans.
- Combine task lists, docs, spreadsheets, and chat in one
- View and edit from mobile/offline
- Cut down on emails

Join & Write a Comment

NTFS file system has been developed by Microsoft that is widely used by Windows NT operating system and its advanced versions. It is the mostly used over FAT file system as it provides superior features like reliability, security, storage, efficienc…
A procedure for exporting installed hotfix details of remote computers using powershell
It is a freely distributed piece of software for such tasks as photo retouching, image composition and image authoring. It works on many operating systems, in many languages.
Internet Business Fax to Email Made Easy - With eFax Corporate (http://www.enterprise.efax.com), you'll receive a dedicated online fax number, which is used the same way as a typical analog fax number. You'll receive secure faxes in your email, fr…

705 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question

Need Help in Real-Time?

Connect with top rated Experts

14 Experts available now in Live!

Get 1:1 Help Now