Workstations not able to see AD DC

[shankar083]

We just installed a Fortigate 40F running v7.0.17 0682

Our workstations cannot see the Active Directory Domain Controller. I can only assume this is because of adding the domain to the DNS, or setting primary DNS Suffix.

All documentation on setting DNS suffix seems to point to VPN or IPSEC, and that's not the case. I'm thinking DHCP, but I cannot find where to set primary DNS suffix.

The Fortigate is set as DHCP.

Any ideas or other suggestions?

[dingjerry_FTNT]

Hi @shankar083 ,

Info not clear:

"Our workstations cannot see the Active Directory Domain Controller."

What are the workstations?  Are they the hosts on the internal network? Or are the hosts running FortiClient?

And what does it mean for "cannot see the Active Directory Domain Controller"?  You mean, something like, you can't ping the AD DC with a hostname from the workstations?  If so, can you ping the AD DC with an IP address directly?