hi
ive made a quick pic to help describe what i'm trying to acomplish.

http://cisco.truedeviant.com/ad.jpg

the fire wall will only allow the two domain contrrolers to talk to
each other and this can not be modifided.
sites and services are set up ok ad are the trusts
the issue that am haveing is

is when i logon to the clinet machine that is a member of Domain B and
try to logon to Domain A

i can see in wireshark that the client is trying to talk to the Domain
A domain controller but is failing due to the fire wall. with out
enableing routeing and or tunneling on Domains A domain controller is
there any way i can get the client to talk to domain B and get domain
B to authenticated the Domain A users
and alow the user to logon.

cheers

Yale

RE: 2 Domains 1 Forest and Fire wall by RossBale

RossBale
Thu May 15 13:55:04 PDT 2008

Hi Yale,

Which of your servers holds the Global Catalog and FSMO Roles?

Usually a client will try to contact a Global Catalog server to work out
which Domain Controller to authenticate with - it could just be as simple as
Domain A is the GC which the client is looking for.

Ross Bale
http://rossbale.wordpress.com

"yale32@gmail.com" wrote:

> hi
> ive made a quick pic to help describe what i'm trying to acomplish.
>
> http://cisco.truedeviant.com/ad.jpg
>
> the fire wall will only allow the two domain contrrolers to talk to
> each other and this can not be modifided.
> sites and services are set up ok ad are the trusts
> the issue that am haveing is
>
> is when i logon to the clinet machine that is a member of Domain B and
> try to logon to Domain A
>
> i can see in wireshark that the client is trying to talk to the Domain
> A domain controller but is failing due to the fire wall. with out
> enableing routeing and or tunneling on Domains A domain controller is
> there any way i can get the client to talk to domain B and get domain
> B to authenticated the Domain A users
> and alow the user to logon.
>
> cheers
>
> Yale
>