http://blogs.technet.com/ad/archive/2009/04/22/dcs-and-network-address-translation.aspxA lot of planning goes into the features and capabilities of each Windows release. Over the years I’ve noticed that there is not a great deal of awareness out in the general public for just how much work and labor goes into a new version of Windows. We’llenCommunityServer 2.1 SP1 (Build: 61025.2)http://blogs.technet.com/ad/archive/2009/04/22/dcs-and-network-address-translation.aspx#3229221Wed, 22 Apr 2009 17:11:33 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3229221wilfman<p>Tim.</p> <p>Great article. &nbsp;Will remember this for next time we come across this issue.</p> http://blogs.technet.com/ad/archive/2009/04/22/dcs-and-network-address-translation.aspx#3232295Wed, 29 Apr 2009 07:31:16 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3232295JansenET<p>I had a client with that same issue about 3 years ago. &nbsp;They ended up re-arranging the network and did an IP cutover, going away from using NAT'ing to fix the issues. &nbsp;I have to say that this is the best breakdown of this specific issue that I have seen to date. &nbsp;Keep up the good articles!</p> <p>Eric Jansen</p> http://blogs.technet.com/ad/archive/2009/04/22/dcs-and-network-address-translation.aspx#3269067Wed, 29 Jul 2009 16:09:40 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3269067msbrianp<p>Does this potentially pose problems with Kerberos authentication through the NAT device to the DC in the NATed segment? &nbsp; Good artical- thanks. &nbsp;</p> http://blogs.technet.com/ad/archive/2009/04/22/dcs-and-network-address-translation.aspx#3280606Fri, 11 Sep 2009 18:52:15 GMTd5e57398-b9ef-4490-9955-07cbb4e4a80d:3280606Tim Springston<p>Kerberos should not have problems with the NATted solution as long as the appropriate ports (UDP and TCP 88) are open.</p>