Required TCP/IP ports for a ADS

[Jay Keck]

I am having trouble finding the required TCP/IP ports to
allow throught a firewall to access a Win2K AD domain
controller. Does anyone have that information handy?

 

[Keith W. McCammon]

I took a stab at this once:

http://mccammon.org/modules.php?op=modload&name=Sections&file=index&req=viewarticle&artid=5&page=1

Sorry about the long URL. This site's coming down soon to correct this
issue.

 

[Ohaya]

Jay:

http://support.microsoft.com/default.aspx?scid=KB;EN-US;Q289241&ID=KB;EN-US;Q289241

 

[Steven L Umbach]

This link should help and be sure to pay attention to part about how to manage
c. --- Steve

http://www.microsoft.com/serviceproviders/columns/config_ipsec_P63623.asp

 

[Guest]

Steve;

Is a great article but it maybe over the top for my needs,
I just need the clients from subnet B to be able to logon
in my DC located in subnet A without viewing the other PCs
and severs in subnet A.

Thanks

 

[Guest]

Godd stuff

-----Original Message-----
I took a stab at this once:

http://mccammon.org/modules.php? op=modload&name=Sections&file=index&req=viewarticle&artid=5
&page=1

Sorry about the long URL. This site's coming down soon to correct this
issue.




.

 

[Steven L Umbach]

This KB may help. Try just the ports for W2K which excludes the netbios ports. ---
Steve

http://support.microsoft.com/default.aspx?scid=kb;en-us;179442

 

[Guest]

Steve:

Do you have any idea what windows uses for network
browsing? If a user uses Windows Explorer to connect to
machines open share and transfers files how does windows
do that?

Jay Keck

-----Original Message-----
This KB may help. Try just the ports for W2K which

excludes the netbios ports. ---

 

[Guest]

Do you have any idea what windows uses for network
browsing? If a user uses Windows Explorer to connect to
another machines open share and transfers files how does
windows do that?

Jay Keck

 

[Steven L Umbach]

That is done with the netbios/cifs ports 135, 137,138,139, and 445 tcp
and/or udp. I think 137 and 138 tcp are the ports used for "browsing" and
139 or 445 are used for actual file tranfers [445 is used if 139 is
unavailable]. The browser service works behind the scenes to build and
maintain the browse list and the use of a wins server or lmhost files are
needed to browse across subnets. When a user connects to another computer
found either by browsing or unc the other computer asks for his credentials
[logon name/password] unless the guest account is enabled. If the user knows
the logon name/password or is already logged on with them them, as in a
domain environment, then he is granted access if he has proper share/ntfs
permissions, otherwise he is denied access. Once granted access the file
transfer process proceeds if the proper ports are available between the two
computers. See links for more info on ports, etc. --- Steve

http://www.microsoft.com/WINDOWS2000/techinfo/reskit/samplechapters/cnfc/cnf
c_por_simw.asp
http://support.microsoft.com/default.aspx?scid=kb;EN-US;102878