add a new sub somain thru a firewall

[Pierre Bru]

hello,

I need to add a new branch in my AD. I currently have:

my.domain
someplace.my.domain

I want to add

anotherplace.my.domain

but but there is a firewall between the root domain controler of
my.domain and the domain controler of notherplace.my.domain

what port/protocol do I need to open on the firewall to perform the
instalation ? and for regular use ?

TIA,
Pierre.

 

[Cary Shultz [A.D. MVP]]

Pierre,

Please consider setting up a Site-to-Site VPN ( aka Firewall-to-Firewall
VPN ) between the two locations. This would be a much more secure solution
than opening up a ton of ports on each Firewall. However, if that is not
possible then please take a look at the following paper:

http://www.microsoft.com/serviceproviders/columns/config_ipsec_P63623.asp

HTH,

Cary

 

[Pierre Bru]

thanks for your answer.

must all domain controlers see all the others domain controlers thru the
VPN (parent domain + the other subdomains) or is the domain controler of
the parent domain enough ?

Pierre.