Power BI server on Windows Server 2012 R2 Standard in DMZ Issue

Dears,

A Windows Server 2012 R2 Standard originally located in DC and fine logon with local admin, meanwhile, a Power BI Server (V 14.0.600.301) is installed and able to grant access to AD profile.

After move to the DMZ, only able to logon local admin but unable to contact any AD profile though domain is joined. The same for Power BI Server which lost all the AD security setting and unable to logon with any AD profile on client desktop using Power BI web portal.

We noticed that once using remote desktop logon, there is an error message "The Trust Relationship between this workstation and primary domain failed", then logon with local admin and try to add AD users would shows "This PC is having problems communicating with the domain". Details could refer screen shots.

We used to check the firewall log but no findings, then search on internet seems ports below need to open. 

Does anyone encounter similar issue ?

Does Power BI Server must connect to domain profile but not logon with local admin ?

https://community.spiceworks.com/topic/190182-allowing-domain-logon-via-a-workstation-behind-dmz

https://support.microsoft.com/en-us/help/179442/how-to-configure-a-firewall-for-domains-and-trusts

Many Thanks !