If you can avoid it, don't put your DC's behind a firewall at all. Take a look at this link for how to enable AD communication through a firewall:
http://support.microsoft.com/default.aspx?scid=kb;en-us;179442 Phil On Wed, 23 Mar 2005 13:38:57 -0600, Dave A. Marquis <[EMAIL PROTECTED]> wrote: > Hmm... Doesn't sound like a good idea to me. I would suggest a Cisco pix > firewall as the windows model is kinda insecure.... My 2 cents > List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/