AD 端口是开单向还是双向呢？

这是一个大家感兴趣的话题，在微软官方论坛，我们可以找到答案，做一个参考

DC<->DC  双向

DC<->Client  单向

以下是参考链接

<a href="http://social.technet.microsoft.com/Forums/sk/winserverDS/thread/f67047fe-b13a-4636-a934-30fd083bc1a7">http://social.technet.microsoft.com/Forums/sk/winserverDS/thread/f67047fe-b13a-4636-a934-30fd083bc1a7</a>

You do need outgoing traffic for DC to DC communication 

For firewalls separating clients and DCs, allow incoming traffic 

Assuming that your firewalls are stateful). Enable logging to catch any blocked communication...

本文转自 VirtualTom 51CTO博客，原文链接：http://blog.51cto.com/virtualtom/1091068，如需转载请自行联系原作者