Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

Windows 2012 DCPromo in a firewall restricted environment

$
0
0

Hello

I have a domain controller I wanted to promote in a controlled environment (everything Under Windows 2012)

The following ports are opened in our firewall between both side: (in/out going)

TCP/UDP 53
TCP/UDP 88
UDP 123
TCP 135
TCP 139
TCP/UDP 389
TCP 445
TCP/UDP 464
TCP 3268-3269
TCP 3389
TCP/UDP 50000-50255
ICMP

 

The following change have been made in our domain controllers and in the member server we wanted to promote

Highport   parameter TCP netsh   int ipv4 set dynamicport tcp 50000 255 P
Highport   parameter UDP netsh   int ipv4 set dynamicport udp 50000 255 P
Change DC replication random port to fixed HKLM\System\CCS\Service\NTDS\Parameters\
    Port TCP/IP REG_DWORD
    50000
Change DC replication random port to fixed HKLM\System\CCS\Service\Netlogon\Parameters\
    DCTcpipPort REG_DWORD
    50001

 

The server is ok as a member server, we added the ADDS services then goes through the promoting task (via the post deployment task)

 

Everything goes smooth, except that the initial replication never kick in.

The following is logged in the DFSR logs:

Source DFSR - ID 6016

msDFSR-LocalSettings
CN=DFSR-LocalSettings,CN=INFRA-RODC-ESM,OU=Domain
Controllers,DC=VCLOUD,DC=LU
2
The system cannot find
the file specified.
INFRA-DC-01.VCLOUD.LU
60

 What can I do and what should I do in order to sort this out?

Thanks


MCITP: Enterprise Messaging Administrator 2010 MCTS: Lync Server 2010, Configuring MCSE


Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>