Join a server from a different subnet to the domain

[digitallyskilled]

I have a watchguard firewall that seperates 2 of my subnets

10.1.1.0/24 TRUSTED and 10.1.2.0/24(DMZ)

I want to add a server on the DMZ to the domain. I have dns, kerebos, smd and rpc and Ping opened on the firewall but the server still can not resolve the dns name to join it to the domain. any ideas

 

[Roadki11]

Try opening netbios or try when joining to the domain, the whole domain name. For example, instead of telling it to join the domain blah try blah.com.

RoadKi11

 

[digitallyskilled]

I have that port open as well still no luck.

I can ping the ip address fine, but i cant type in the server name and have it resolve.

 

[Roadki11]

the primary dns server for the server in the dmz is the domain controller for the domain you are trying to join correct? you dont have ISP dns address in the dmz server do ya?

RoadKi11

 

[digitallyskilled]

No the preferred DNS server is pointing to the DNS server on the DC.

 

[Roadki11]

Try this, in the hosts file on the server in the dmz add an entry for your domain controller then try and join. looks at the hosts file first for resolution, this isnt a fix but it may give more info to work with.

RoadKi11

 

[kmkeshav]

Refer to the below link (whitepaper):

http://www.microsoft.com/downloads/...46-43f0-4caf-9767-a9166368434e&displaylang=en

Hope this helps.

-Keshav

 

[lebisol]

on new servers use LMHOST file to point the your DC.

:--------------------------------------:

All around in my home town,
They tryin' to track me down...

 

[digitallyskilled]

Got it sorted with the help of microsoft support. basically it is just the matter of opening the right ports here is a summary

Here is the port query tool that we used.

http://www.microsoft.com/downloads/...47-C74B-4638-A2D5-AC828BDC6983&displaylang=en

Here is an article that shows how to use it

http://www.microsoft.com/technet/community/columns/cableguy/cg0105.mspx

Here is the article that showed us what ports to open

http://support.microsoft.com/kb/179442

This is how we found the additional ports to open (see step for at the bottom of the page)

http://support.microsoft.com/kb/839880

We also used the Microsoft packet analyzer but I am sure any packet analyzer would do.

 

[lebisol]

cool, you may like this utility better:

http://www.download.com/Active-Ports/3000-2085_4-10121832.html

All the best!

:--------------------------------------:

All around in my home town,
They tryin' to track me down...