Can't add a client machine to domain remotely

Question

Hello Experts

I'm trying to add a windows 10 Laptop to DC remotely, there is no VPN connectivity between two locations, this set up for remote users who will be working from home due to the current outbreak of Covid-19, I have opened all ports at HO firewall, and I have pointed Client machines DNS IP to HO Public IP, I'm getting Internet connectivity from Client machine with HO DNS IP, I'm Able to add client machines from inside HO LAN, when I try to join a computer from remote location I gets error message with "THE FOLLOWING DOMAIN CONTROLLERS WERE IDENTIFIED BY THE QUERY:SERVER.JAMAICA.LOCAL HOWEVER NO DOMAIN CONTROLLER COULD BE CONTACTED" I'm able to browse DC remotely \HO_IP_ADDRESS and I can view sysvol and netlogon folder, DNS Query, SRV, Ping query all are successful from remote location, is there anything missing or any more changes I need to do ? please see below query results from Remote location

C:\users\administrator> nslookup server.jamaica.local

server : server.jamaica.local

address : [IP-address-of-HO]

name : server.jamaica.local

address : 172.31.29.73

_ldap._tcp.dc._msdcs.jamaica.local

Server: server.jamaica.local
Address: [Public_IP_of_HO]
_ldap._tcp.dc._msdcs.jamaica.local SRV service location:

      priority       = 0 
      weight         = 100 
      port           = 389 
      svr hostname   = server.jamaica.local 

server.jamaica.local internet address = 172.31.29.73

C:\Users\administrator>ping -a [HO_Public_IP]
Pinging server.jamaica.local [HO_Public_IP] with 32 bytes of data:

Reply from [HO_Public_IP]: bytes=32 time=10ms TTL=112
Reply from [HO_Public_IP]: bytes=32 time=14ms TTL=112
Reply from [HO_Public_IP]: bytes=32 time=14ms TTL=112
Reply from [HO_Public_IP]: bytes=32 time=12ms TTL=112

Ping statistics for [HO_Public_IP]:
Packets: Sent = 4, Received = 4, Lost = 0 (0% loss),
Approximate round trip times in milli-seconds:
Minimum = 10ms, Maximum = 14ms, Average = 12ms

DNS was successfully queried for the service location (SRV) resource record used to locate a domain controller for domain "jamaica.local":

The query was for the SRV record for _ldap._tcp.dc._msdcs.jamaica.local

The following domain controllers were identified by the query:
server.jamaica.local

However no domain controllers could be contacted.

Common causes of this error include:

• Host (A) or (AAAA) records that map the names of the domain controllers to their IP addresses are missing or contain incorrect addresses.
• Domain controllers registered in DNS are not connected to the network or are not running.

Answer 1

I'm trying to add a windows 10 Laptop to DC remotely, there is no VPN connectivity between two locations

Domain join or domain communications isn't possible over internet without VPN. I'd check the domain controller and problem member both have the static ip address of DC listed for DNS and no others such as router or public DNS

--please don't forget to Accept as answer if the reply is helpful--