Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top


I have two NICs in my server (DC).

Frist NIC - WAN (static IP address)

Second NIC - LAN (static for Active Directory users to join)

I need to share the Internet connection from the first NIC to the second NIC.

How do I enable clients to access the Internet when they connect to the domain controller (Active Directory)?

share|improve this question

migrated from Oct 18 '11 at 6:17

This question came from our site for professional and enthusiast programmers.

closed as not constructive by Ward, Shane Madden, MikeyB, Chris S, Holocryptic Oct 18 '11 at 20:14

As it currently stands, this question is not a good fit for our Q&A format. We expect answers to be supported by facts, references, or expertise, but this question will likely solicit debate, arguments, polling, or extended discussion. If you feel that this question can be improved and possibly reopened, visit the help center for guidance.If this question can be reworded to fit the rules in the help center, please edit the question.

Is the AD your Default Gateway? – Bart De Vos Oct 18 '11 at 6:20
What is the reason to do so? Why not set it up in a more conservative way with a separate router? It just is not a good idea to put more functionality on domain controllers. – Posipiet Oct 18 '11 at 6:37
You're using your domain controller as your Internet gateway? If you're worried that hackers on the internet are bored then you need to give them something that's actually a challenge, not just more of the same ol' 'too easy to bother with'. – RobM Oct 18 '11 at 7:07
You're just inviting problems trying to do this. Buy yourself a small firewall for a few hundred $ and do it properly. You'll save yourself money in the long run. – Ian Murphy Oct 18 '11 at 14:31
Stop. Back away from your Domain Controller. Hire someone that knows that they are doing. – MDMarra Oct 18 '11 at 20:04
up vote 2 down vote accepted

You should not do that, because you shouldn't expose your Domain Controller directly to the Internet.

Though, you can do that but keep in mind the right management of the Firewall.

You need two network cards on your domain controller, one to the LAN and another one to the Internet.

You should install the RRAS role on that server (with this your server will work as a router) and in RRAS enable the feature called NAT. This is really simple and there is a lot of documentation on the web.

You should change the gateway of all your machines to be the LAN network interface card of the Domain Controller. If you have a DHCP server, make the change on it.

share|improve this answer
+1 because RRAS is actually the way to do that; but it really shouldn't be done on a DC. – Massimo Oct 18 '11 at 20:06
yes its not secure... – achieverprince Oct 19 '11 at 6:16

NEVER MULTIHOME DOMAIN CONTROLLERS. It is not considered good practice. You should not do this especially if you are asking such elementary questions. The guy I replaced did this and I've had AD headaches because of this.

Use radius or a proxy to control internet access. Or a cheap router. Anything but this.

share|improve this answer

Not the answer you're looking for? Browse other questions tagged or ask your own question.