Active Directory join issues

Hello,

actually I setup a 2012 R2 Server and try to join with W7 clients from different subnets without success. The CCR holds on eth5 both subnets. A join from the same subnet is working.

In addition I run the MS tool portquery without havin any issues, related AD and trust between a client and the DC

Is there something special that I have to setup on the routeros firewall eg?

Any issues are known?

regards
Maedo

Maybe a DNS issue? W7 computers need to find the domain controller responsible for your domain. Subnet #1 is probably using the Win 2012 server as DNS already? So Dns records are already set.

Try setting DNS for subnet #2 to point to your Win2012 server.

Hello and thank you for your tip,

in fact it was one DNS entry inside the firewall rules.
chain=input action=drop protocol=udp in-interface=!ether5 dst-port=53 log=no log-prefix=“dnsdrop”

after disabling the rule the Domain join is working but I have to complain I am unsure about the reason.
in-interface=!ether5 means to me drop all depending udp traffic unequal ether 5 and during this issue the ccr was connected over eth1, wan’’ and eth5, lan’’

thx
Maedo