Cannot join domain over internet

[Matt]

Hello,

I have a windows 2003 server at my workplace running
active directory. It is behind a pix firewall but for the
moment i am allowing everything to get in and out from
the servers IP.

Secondly, I have a windows server 2003 computer at home
connected to the internet via a cable modem. I have
opened all of the recommended ports for active directory
including ldap/secureldap/dns/rpc/netbios etc etc.

I know the firewall is ok as I can access services which
I have opened (such as RDP) and the two machines are able
to ping each other.

I have also checked the SRV records on the DNS server
(box at work) and queried the dns records from the remote
machine and it returned the correct response.

My problem is that I'm trying to make the remote server
an additional domain controller for the domain running on
my computer at work. Each time I try I recieve an error
while attempting to join the domain that the RPC server
is unavailable.

The RPC process is running on both servers. I've tried
everything microsoft (and others) have suggested and I'm
puzzled as to why it won't join the domain.

Does anyone have any suggestions other than opening the
recommended ports and checking the SRV records and making
sure RPC is running ?

Thanks !

[Jason]

One thing that I would check is your ISP. I would assume
that a home version of their DSL might be restricted from
performing this type of connectivity.

Jason

>-----Original Message-----
>Hello,
>
>I have a windows 2003 server at my workplace running
>active directory. It is behind a pix firewall but for

the

>moment i am allowing everything to get in and out from
>the servers IP.
>
>Secondly, I have a windows server 2003 computer at home
>connected to the internet via a cable modem. I have
>opened all of the recommended ports for active directory
>including ldap/secureldap/dns/rpc/netbios etc etc.
>
>I know the firewall is ok as I can access services which
>I have opened (such as RDP) and the two machines are

able

>to ping each other.
>
>I have also checked the SRV records on the DNS server
>(box at work) and queried the dns records from the

remote

>machine and it returned the correct response.
>
>My problem is that I'm trying to make the remote server
>an additional domain controller for the domain running

on

>my computer at work. Each time I try I recieve an error
>while attempting to join the domain that the RPC server
>is unavailable.
>
>The RPC process is running on both servers. I've tried
>everything microsoft (and others) have suggested and I'm
>puzzled as to why it won't join the domain.
>
>Does anyone have any suggestions other than opening the
>recommended ports and checking the SRV records and

making

>sure RPC is running ?
>
>Thanks !
>.
>

[Mike]

The problem is most likely that, in the TCP/IP properties
of the home machine you would have to have your work DC's
IP for the primary DNS server.

Mike

>-----Original Message-----
>Hello,
>
>I have a windows 2003 server at my workplace running
>active directory. It is behind a pix firewall but for

the

>moment i am allowing everything to get in and out from
>the servers IP.
>
>Secondly, I have a windows server 2003 computer at home
>connected to the internet via a cable modem. I have
>opened all of the recommended ports for active directory
>including ldap/secureldap/dns/rpc/netbios etc etc.
>
>I know the firewall is ok as I can access services which
>I have opened (such as RDP) and the two machines are

able

>to ping each other.
>
>I have also checked the SRV records on the DNS server
>(box at work) and queried the dns records from the

remote

>machine and it returned the correct response.
>
>My problem is that I'm trying to make the remote server
>an additional domain controller for the domain running

on

>my computer at work. Each time I try I recieve an error
>while attempting to join the domain that the RPC server
>is unavailable.
>
>The RPC process is running on both servers. I've tried
>everything microsoft (and others) have suggested and I'm
>puzzled as to why it won't join the domain.
>
>Does anyone have any suggestions other than opening the
>recommended ports and checking the SRV records and

making

>sure RPC is running ?
>
>Thanks !
>.
>

thanks, i've already tried that but your suggestion is
appreciated.

[Doug Sherman [MVP]]

The problem may be RPC dynamic port allocation - See:

[url]http://support.microsoft.com/default.aspx?kbid=154596[/url]

I have had good luck joining a domain over a VPN client connection - much
easier than opening multiple ports, but very s l o w. On
reboot, you can configure the remote machine to logon over the VPN
connection.

Doug Sherman
MCSE Win2k/NT4.0, MCSA, MCP+I, MVP

"Matt" <anonymous@discussions.microsoft.com> wrote in message
news:24af101c46034$b955f280$a601280a@phx.gbl...

> Hello,
>
> I have a windows 2003 server at my workplace running
> active directory. It is behind a pix firewall but for the
> moment i am allowing everything to get in and out from
> the servers IP.
>
> Secondly, I have a windows server 2003 computer at home
> connected to the internet via a cable modem. I have
> opened all of the recommended ports for active directory
> including ldap/secureldap/dns/rpc/netbios etc etc.
>
> I know the firewall is ok as I can access services which
> I have opened (such as RDP) and the two machines are able
> to ping each other.
>
> I have also checked the SRV records on the DNS server
> (box at work) and queried the dns records from the remote
> machine and it returned the correct response.
>
> My problem is that I'm trying to make the remote server
> an additional domain controller for the domain running on
> my computer at work. Each time I try I recieve an error
> while attempting to join the domain that the RPC server
> is unavailable.
>
> The RPC process is running on both servers. I've tried
> everything microsoft (and others) have suggested and I'm
> puzzled as to why it won't join the domain.
>
> Does anyone have any suggestions other than opening the
> recommended ports and checking the SRV records and making
> sure RPC is running ?
>
> Thanks !