无法加入域？

Question

我在将Windows连接到域时遇到了困难，我可以知道问题出在哪里吗？

我怀疑在这个DR内部站点和DMZ之间有一个防火墙，TMG 2010部署在这里吗？

DCDiag /s: result:

Directory Server Diagnosis

Performing initial setup:
   [DCDNS01.domain.com] LDAP bind failed with error 1326,
   Win32 Error 1326.
   Server DCDNS01.domain.com resolved to these IP addresses: 192.168.127.10,
   but none of the addresses could be reached (pinged). Please check the
   network.
   Error: 0x2b02 "Win32 Error 11010"
   This error more often means that the targeted server is shutdown or
   disconnected from the network.

好的，在portqry中我得到了以下结果，而其他带有返回代码0x00000000的出口的结果表示可以吗？那么，为什么有一些出口代码1和2呢？

UDP port 389 (unknown service): LISTENING or FILTERED

Using ephemeral source port
Sending LDAP query to UDP port 389...

LDAP query to port 389 failed
Server did not respond to LDAP query

portqry.exe -n 192.168.12.5 -e 389 -p BOTH exits with return code 0x00000001.
=============================================

 Starting portqry.exe -n 192.168.12.5 -e 53 -p BOTH ...


Querying target system called:

 192.168.12.5

Attempting to resolve IP address to a name...


IP address resolved to DR-DCDNS01-vm.domain.com

querying...

TCP port 53 (domain service): LISTENING

UDP port 53 (domain service): LISTENING or FILTERED

Sending DNS query to UDP port 53...

DNS query timed out
portqry.exe -n 192.168.12.5 -e 53 -p BOTH exits with return code 0x00000002.
=============================================

 Starting portqry.exe -n 192.168.12.5 -e 88 -p BOTH ...


Querying target system called:

 192.168.12.5

Attempting to resolve IP address to a name...


IP address resolved to DR-DCDNS01-vm.domain.com

querying...

TCP port 88 (kerberos service): LISTENING

UDP port 88 (kerberos service): LISTENING or FILTERED
portqry.exe -n 192.168.12.5 -e 88 -p BOTH exits with return code 0x00000002.
=============================================

 Starting portqry.exe -n 192.168.12.5 -e 138 -p UDP ...


Querying target system called:

 192.168.12.5

Attempting to resolve IP address to a name...


IP address resolved to DR-DCDNS01-vm.domain.com

querying...

UDP port 138 (netbios-dgm service): LISTENING or FILTERED
portqry.exe -n 192.168.12.5 -e 138 -p UDP exits with return code 0x00000002.
=============================================

 Starting portqry.exe -n 192.168.12.5 -e 42 -p TCP ...


Querying target system called:

 192.168.12.5

Attempting to resolve IP address to a name...


IP address resolved to DR-DCDNS01-vm.domain.com

querying...

TCP port 42 (nameserver service): FILTERED
portqry.exe -n 192.168.12.5 -e 42 -p TCP exits with return code 0x00000002.

任何形式的帮助都将不胜感激。

Answer 1

如果主机服务器和域控制器之间存在防火墙，则需要确保将其配置为允许在它们之间传递适用的通信量。Microsoft在所需内容上有一个知识库：

http://support.microsoft.com/kb/179442