Active Directory and Firewall Ports

May 9, 2007 · 16 min read

I found it hard to find a definitive list on the internet for what ports needed opening for Active Directory to replication between Firewalls.  Here are my findings and all is working so, hope this helps someone else.

 TCPUDPICMP
RDPRemote Desktop3389  
DNSDNS Download53  
DNS Queries 53 
WINS ReplicationWINS42  
WINS 42 
ICMPecho-request  8
info-request  15
mast request  17
timestamp  13
NetBIOS ServicesName Resolution Service 137137 
Datagram  Services (Browsing) 138 
Session Service (net use)139  
SMBInput445  
Output 445 
Remote Storm 1025  
NTPNTP123  
NTP 123 
Content ReplicationContent_Repl507  
KerberosKerberos-Secure 750 
Kerberos_v588 + 464  
Kerberos_v5 88 + 464 
LDAPLDAP389  
LDAP 389 
LDAP over SSL/TLS636636 
Global Catalog3268  
Global Catalog over SSL/TSL3269  
ReplicationActive DirectoryRPCSS Dynamic  
FRSRPCSS Dynamic  
Microsoft CIFSMicrosoft-CIFS (DS) 445  
Microsoft-CIFS (DS) 445 
RPC – Cert Services (+)RPC135  
SNMPSNMP Agent 161 
SNMP Trap162  
ASP.Net State Service 42424  
Link State Algorithm Routing 691  
TCP – High Ports  (Cert Services)> 10231024 - 65535  
This article is part of the GWB Archives. Original Author: Jason Miles

New on Geeks with Blogs

  • We Won The One Award I Actually Care About

    Full Scale made the Inc. 5000 for the fifth year straight, the 12th listing across my three companies. Here is why the one award you cannot buy is worth stopping for.

  • Your Customers Build the Features Now

    I let a tool I liked sit dead for a year rather than build the features I wanted. An MCP server meant I never had to, and your customers can do the same to your product.

  • Get the Size of a Directory in Linux the Easy Way

    du -sh for the quick answer, ncdu for the cleanup, df for the disk itself: every command for checking directory size in Linux, plus why du and df never agree.

  • Vim Search and Replace: The Ultimate Guide

    One :%s command replaces every match in a file before a find dialog would even open. The Vim substitute patterns worth the muscle memory: flags, ranges, capture groups, and multi-file edits.