[ActiveDir] Using Active Directory between a firewall

[Oluwaseyi Owoeye]

Hi guys,   I have a little problem over here. I have an implementation of active directory where the servers sit on a subnet and all the client workstations sit in another subnet.   For security reasons I want to move the servers into  DMZ zone. I found out that when I move the servers into the DMZ zone they are not able to communicate with active directory. This is because the domain controller is within the proper network, but the servers that needs to be moved into the DMZ are servers like the exchange and ISA servers and these servers need to communicate with active directory to function properly.   What ports do I need to open on the firewall in other for the machines in the DMZ to talk to active directory effectively.   Thanks VIRUS SCANNED! Marina One