Windows Firewall and RRAS

I have a problem with sysvol and netlogon folder not replicating between my 2
DC's. After trying everything the last thing to check is firewall issues.

The two DC's are:
dep-s-dc (Win 2k3)
dep-s-004 (win 2k8)

dep-s-004 isn't obtaining sysvol or netlogon folder from dep-s-dc. dep-s-dc
is also our VPN server and as such you can't run Windows Firewall to check
the exceptions.

My question is, Is Windows Firewall still running? if it is how would I add
exceptions or turn it off to see if replication then works?

Full details of my problem are her
http://www.microsoft.com/communities...r=US&sloc=&p=1

"CW" <(E-Mail Removed)> wrote in message
news:9EFEE0F6-32CC-4DC5-A7AC-(E-Mail Removed)...
>I have a problem with sysvol and netlogon folder not replicating between my
>2
> DC's. After trying everything the last thing to check is firewall issues.
>
> The two DC's are:
> dep-s-dc (Win 2k3)
> dep-s-004 (win 2k8)
>
> dep-s-004 isn't obtaining sysvol or netlogon folder from dep-s-dc.
> dep-s-dc
> is also our VPN server and as such you can't run Windows Firewall to check
> the exceptions.

Being a VPN Server means it is multi-homed. Domain controllers should not
be multi-homed

272294 - Active Directory Communication Fails on Multihomed Domain
Controllers
http://support.microsoft.com/default...b;en-us;272294


--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

Hi Phillip,

I thought this maybe the case. If I move the VPN to another server and
disable RRAS on the old one I should be able to configure the firewall
properly, is this correct?

Yes you should be fine using another server.
You may want to uninstall RRAS on the DC to avoid future tempatation.

--
Phillip Windell
www.wandtv.com

The views expressed, are my own and not those of my employer, or Microsoft,
or anyone else associated with me, including my cats.
-----------------------------------------------------

"CW" <(E-Mail Removed)> wrote in message
news:B13F161D-40F5-4794-8EE5-(E-Mail Removed)...
> Hi Phillip,
>
> I thought this maybe the case. If I move the VPN to another server and
> disable RRAS on the old one I should be able to configure the firewall
> properly, is this correct?