Term. Ser. TCPIP filtering

[ck]

I am trying to lockdown a terminal server by only opening
certain ports. The problem is that I need to allow
domain communications as well. I've tried several
combinations of port numbers but once I restart, the
domain is no longer available. I know 3389 needs to be
open for the terminal services communications, but what
ports need to be opened to locate and use domain
resources. Term. Server is located in a win2k network
with AD, DNS, WINS running in mixed-mode.

Thanks in Advance.

 

[Vera Noest [MVP]]

Have a look at the file C:\winnt\system32\drivers\etc\services. You
can open it with notepad. This contains a list of the services that
are (potentially) running on your server, with their ports.

 

[Sam Snyder]

-----Original Message-----
I am trying to lockdown a terminal server by only opening
certain ports. The problem is that I need to allow
domain communications as well. I've tried several
combinations of port numbers but once I restart, the
domain is no longer available. I know 3389 needs to be
open for the terminal services communications, but what
ports need to be opened to locate and use domain
resources. Term. Server is located in a win2k network
with AD, DNS, WINS running in mixed-mode.

Thanks in Advance.
.
Refer to Microsoft KB Article 150543. It lists all of

the ports and their use in domain communication.