Domain controller locking out box's

nothings555 · 01-09-2009, 09:41 AM

Ok here is my dilemma.

I have a domain controller that I can access fine with windows firewall up, but not the other dozen pc's on that domain. I have to keep taking it down to access them.

Some info:

OS: Win 2003 Enterprise
Firewall: Windows
Remote Desktop is enabled on this PC for exception

What could I possibly be missing?

**bilbus** · 01-09-2009, 12:37 PM

You can't enable windows firewall on a DC ... without a long list of exceptions.

nothings555 · 01-09-2009, 12:44 PM

There is a long list of exceptions, but as far as the remote desktop is concerned. Why is it not allowing every pc on that domain access besides its self when the firewall is up?

**bilbus** · 01-09-2009, 01:22 PM

I thought your question was about access problems to the DC (for DC related things not RDP)

Is the DC on the same subnet as the client?
You can RDP in to domain controler when the firewall is down?
Do you have remote desktop, or remote assistence permited in firewall?

nothings555 · 01-09-2009, 02:37 PM

No, I can access the domain controller just fine, with the firewall up or down.

The problem is when the firewall is up on the domain controller, I cannot access the servers on that domain (besides the domain controller).

RDP is enabled in the firewall as an exception.

**bilbus** · 01-09-2009, 03:27 PM

You need the firewall down to connect to other servers on the network.

Just because you want to talk to a server on the network (non DC) does not mean the DC is not on the loop. If you enable the firewall on the DC you will not be able to talk to any desktop, server on the network. when you login to the server you are using a domain user account, for a server to allow access it must talk to the DC to check the account information, then it permits access.

I have never met anyone who uses the windows firewall on a DC.

http://support.microsoft.com/kb/555381

nothings555 · 01-09-2009, 03:44 PM

Thanks a lot bilbus, that link was the perfect answer :).

**bilbus** · 01-09-2009, 03:54 PM

You need the firewall down to connect to other servers on the network.

Just because you want to talk to a server on the network (non DC) does not mean the DC is not on the loop. If you enable the firewall on the DC you will not be able to talk to any desktop, server on the network. when you login to the server you are using a domain user account, for a server to allow access it must talk to the DC to check the account information, then it permits access.

I have never met anyone who uses the windows firewall on a DC.

http://support.microsoft.com/kb/555381

01-09-2009, 09:41 AM	#1 (permalink)
nothings555 Registered User Join Date: Jan 2009 Posts: 4 OS: 2003 server	Domain controller locking out box's Ok here is my dilemma. I have a domain controller that I can access fine with windows firewall up, but not the other dozen pc's on that domain. I have to keep taking it down to access them. Some info: OS: Win 2003 Enterprise Firewall: Windows Remote Desktop is enabled on this PC for exception What could I possibly be missing?

01-09-2009, 12:37 PM	#2 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 965 OS: OS2 Warp	Re: Domain controller locking out box's You can't enable windows firewall on a DC ... without a long list of exceptions.

01-09-2009, 12:44 PM	#3 (permalink)
nothings555 Registered User Join Date: Jan 2009 Posts: 4 OS: 2003 server	Re: Domain controller locking out box's There is a long list of exceptions, but as far as the remote desktop is concerned. Why is it not allowing every pc on that domain access besides its self when the firewall is up?

01-09-2009, 01:22 PM	#4 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 965 OS: OS2 Warp	Re: Domain controller locking out box's I thought your question was about access problems to the DC (for DC related things not RDP) Is the DC on the same subnet as the client? You can RDP in to domain controler when the firewall is down? Do you have remote desktop, or remote assistence permited in firewall?

01-09-2009, 02:37 PM	#5 (permalink)
nothings555 Registered User Join Date: Jan 2009 Posts: 4 OS: 2003 server	Re: Domain controller locking out box's No, I can access the domain controller just fine, with the firewall up or down. The problem is when the firewall is up on the domain controller, I cannot access the servers on that domain (besides the domain controller). RDP is enabled in the firewall as an exception.

01-09-2009, 03:27 PM	#6 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 965 OS: OS2 Warp	Re: Domain controller locking out box's You need the firewall down to connect to other servers on the network. Just because you want to talk to a server on the network (non DC) does not mean the DC is not on the loop. If you enable the firewall on the DC you will not be able to talk to any desktop, server on the network. when you login to the server you are using a domain user account, for a server to allow access it must talk to the DC to check the account information, then it permits access. I have never met anyone who uses the windows firewall on a DC. http://support.microsoft.com/kb/555381

01-09-2009, 03:44 PM	#7 (permalink)
nothings555 Registered User Join Date: Jan 2009 Posts: 4 OS: 2003 server	Re: Domain controller locking out box's Thanks a lot bilbus, that link was the perfect answer :).

01-09-2009, 03:54 PM	#8 (permalink)
bilbus TSF Enthusiast Join Date: Aug 2006 Posts: 965 OS: OS2 Warp	Re: Domain controller locking out box's You need the firewall down to connect to other servers on the network. Just because you want to talk to a server on the network (non DC) does not mean the DC is not on the loop. If you enable the firewall on the DC you will not be able to talk to any desktop, server on the network. when you login to the server you are using a domain user account, for a server to allow access it must talk to the DC to check the account information, then it permits access. I have never met anyone who uses the windows firewall on a DC. http://support.microsoft.com/kb/555381