AD ports for firewall

[Gary]

I have an active directory box behind a firewall that a
web server uses to authenticate service account logins.
What ports do I need to permit through the firewall and in
which directions?

 

[Tomasz Onyszko]

I have an active directory box behind a firewall that a
web server uses to authenticate service account logins.
What ports do I need to permit through the firewall and in
which directions?

Read through this two documents:

http://support.microsoft.com/?id=832017 - this I think will be handy
http://www.microsoft.com/downloads/...46-43f0-4caf-9767-a9166368434e&DisplayLang=en

In general ports 53,88,123,389, 445 & 3268 should be enough to get
authentication of users to work.

 

[Jimmy Andersson [MVP]]

Some useful info regarding AD and firewalls:

AD Replication over Firewalls:
http://www.microsoft.com/SERVICEPROVIDERS/columns/config_ipsec_p63623.asp

Q179442 - How to Configure a Firewall for Domains and Trusts:
http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q179442

A List of the Windows 2000 Domain Controller Default Ports:
http://support.microsoft.com/directory/article.asp?ID=KB;EN-US;Q289241

Regards,
/Jimmy