search for: dd728034

...do with AD into a DMZ, but that is probably just me. Any AD client in a DMZ (and that includes an RODC) must 'talk' to an internal DC. If you must do this, Microsoft has documentation here: https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd728034(v=ws.10)?redirectedfrom=MSDN Rowland

...> that is probably just me. Any AD client in a DMZ (and that includes an > RODC) must 'talk' to an internal DC. > > If you must do this, Microsoft has documentation here: > > https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd728034(v=ws.10)?redirectedfrom=MSDN > > Rowland > -- ?forumZFD Entschieden f?r Frieden | Committed to Peace Ilias Chasapakis Referent IT | IT Referent Forum Ziviler Friedensdienst e.V. | Forum Civil Peace Service Am K?lner Brett 8 | 50825 K?ln | Germany Tel 0221 91273243 | Fax 0221 91273299 |...

Dear all, We (me and colleagues) were considering setting an RODC in our DMZ for some authentication related questions. We were curious about any suggested best practices for those cases. We also notice that there are quite a lot of ports to open vs. the ADs. * TCP 88 (Kerberos Key Distribution Center) * TCP 135 (Remote Procedure Call) * TCP 139 (NetBIOS Session Service) * TCP 389