[2 days left] What’s wrong with your cloud strategy? Learn why multicloud solutions matter with Nimble Storage.Register Now


Can Computers in a remote office join the home office  domain through a Site-To-Site IPes vPN tunnel?

Posted on 2011-09-26
Medium Priority
Last Modified: 2012-05-12
I just configure S2S VPNs from three remote offices to the Home Office using Cisco ASA 5505's. I have tested the VPNs and I can access files on the home network by using the UNC path from a PC in the remote office. The computers and servers are all Microsoft.

My question is, can the computers in the remote offices be joined directly to the home office network and if so how do I accomplish this?
Question by:MJcouture
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
  • 3
  • 2
LVL 18

Accepted Solution

jmeggers earned 1500 total points
ID: 36601107
To join a Windows XP computer to a domain, I believe you go to System Properties / Computer Name and start there.  There should be a button to join a workgroup or a domain.  But I'm not a Windows person, so it may be different in Windows 7, etc.

But in answer to your question, yes, computers should be able to join a domain over an IPSec tunnel.  The tunnel encrypts all traffic between two subnets.  Presumably one subnet is the remote office and the other is the main office where the controller is located.  As long as you're encrypting traffic between those two subnets, it should work.

Author Comment

ID: 36601144
I tried to Join the windows domain in the system properties but it does not work. I am sure I am missing something I am just no sure what. When I try, it tells me that the an active directory domain controller for the domain listed can not be contacted.

A dns issue?
LVL 10

Expert Comment

ID: 36601223

I'd focus on DNS , from a remote office . Can you ping active directory DNS name ? e.g Company.local ?
Industry Leaders: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!


Author Closing Comment

ID: 36601224
Figured it out!
LVL 10

Expert Comment

ID: 36601234
Make sure your remote PCs can ping your domain name . if that is successful , my next question is about your access lists . do you allow all protocols across your VPN tunnels ?

Author Comment

ID: 36601255
It looks like my whole post did not go through. It was a DNS issue.

Featured Post

Q2 2017 - Latest Malware & Internet Attacks

WatchGuard’s Threat Lab is a group of dedicated threat researchers committed to helping you stay ahead of the bad guys by providing in-depth analysis of the top security threats to your network.  Check out our latest Quarterly Internet Security Report!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

During and after that shift to cloud, one area that still poses a struggle for many organizations is what to do with their department file shares.
You deserve ‘straight talk’ from your cloud provider about your risk, your costs, security, uptime and the processes that are in place to protect your mission-critical applications.
After creating this article (http://www.experts-exchange.com/articles/23699/Setup-Mikrotik-routers-with-OSPF.html), I decided to make a video (no audio) to show you how to configure the routers and run some trace routes and pings between the 7 sites…
As a trusted technology advisor to your customers you are likely getting the daily question of, ‘should I put this in the cloud?’ As customer demands for cloud services increases, companies will see a shift from traditional buying patterns to new…

649 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question