Gap access Active Directory with VPN tunnel

[ngsrl]

Hi,

I have connect two lan with two Fortigate 60D and I used this tutorial for ipsec VPN

http://video.fortinet.com/video/190/ipsec-vpn-w-overlapping-subnets

the vpn connection is ok and the ping from the two lan works.

I wont to connect the client to a windows domain but the connection not work;

the primary dns in the client is the ip of the windows server domain controller and it is accessible with ping.

share folder of server is accessible (befor enter the domain credential)

why the connection of client on domain not work?