|
Posted by Steven L Umbach on June 27, 2005, 12:45 pm
If you were Registered and logged in, you could reply and use other advanced thread options
See the links below for details from a KB article that discusses such. More
than likely your problem is with dynamic RPC in that you are finding ports
1025-1030 being dropped by your firewall. You can configure dynamic RPC to
use a limited number of ports and then configure your firewall to allow
them. --- Steve
http://support.microsoft.com/?id=154596
http://support.microsoft.com/kb/179442/
> Hi,
>
> We have a Windows Server on a DMZ, and it's having trouble querying Active
> Directory. We have a PIX and have allowed what we thought is everything
> we need. Does anyone know exactly what ports are needed to query Active
> Directory and have all services running with a Windows Box right out of
> the box?
>
> More specifically, we are getting an RPC Error when trying to add
> administrators to the local groups. It works fine when we allow all IP,
> so we know the problem is with the PIX.
>
> Thanks in advance,
>
> Derek Smith
>
|