Required Network Ports for Active Directory

2 Apr

Here is a listing of the port requirements for Active Directory domain, as well as optional ports:

Required Ports

Port No.

Protocol

Used by

Required for

1024-5000

TCP/UDP

RPC (dynamic response ports)

required for RPC to respond to communications

135

TCP

RPC (endpoint mapper) 

required to open the endpoint mapper to the destination for RPC communications

389

TCP/UDP

LDAP

required to bind to a DC

3268

TCP

LDAP GC 

required to bind to the GC function of a domain controller (extremely important for Exchange)

53

TCP/UDP

DNS

required for name resolution and Active Directory functionality as a whole

88

TCP/UDP

Kerberos

self explanatory

445

TCP

SMB

self explanatory

123

UDP

SNTP

required for time synchronization with a time source

 

 

ICMP

required for group policy detection, application, and MTU size detection, as well as other low level activities

 

Optional Ports

Port No.

Protocol

Used by

Required for

636

TCP

LDAP SSL 

required to bind to a DC using LDAP over SSL

3269

TCP

LDAP GC SSL 

required to bind to a GC using LDAP over SSL

137

UDP

NetBIOS name 

self explanatory

138

UDP

NetBIOS Netlogon and Browsing 

self explanatory

139

TCP

NetBIOS session 

self explanatory

42

TCP

WINS replication 

self explanatory

1723

TCP

PPTP

required if using PPTP VPN tunnel

PortQryUI is a very good to check the ports.

To download portqry:

http://www.microsoft.com/downloads/details.aspx?familyid=8355e537-1ea6-4569-aabb-f248f4bd91d0&displaylang=en

Description of the Portqry.exe command-line utility
http://support.microsoft.com/default.aspx?scid=kb;en-us;310099

For more information on port requirements, please see:

http://support.microsoft.com/support/kb/articles/q179/4/42.asp

For Exchange considerations:

http://support.microsoft.com/?kbid=259240
http://support.microsoft.com/default.aspx?scid=kb;en-us;280132

For SQL considerations:

http://support.microsoft.com/kb/q287932/

For SMS considerations:

http://support.microsoft.com/default.aspx?scid=kb;en-us;200898
http://support.microsoft.com/kb/q167128/

Don’t forget to leave your comments 🙂

Thanks,
Aresh

Leave a Reply

%d bloggers like this: