Active Directory port and protocol requirements Application servers, client computers and domain controllers that are

located in common or external forests have service dependencies so that user and computer initiated operations like domain join, logon authentication, remote administration, and Active Directory replication work correctly. Such services and operations require network connectivity over specific port and networking protocols.

A summarized list of services, ports and protocols required for member computers and domain controllers to inter-operate with each other or for application servers to access Active Directory include but are not limited to the following. Services on which Active Directory depends Active Directory / LSA Application protocol Global Catalog Server Global Catalog Server LDAP Server LDAP Server LDAP SSL LDAP SSL IPsec ISAKMP NAT-T RPC RPC randomly allocated high TCP ports Protocol TCP TCP TCP UDP TCP UDP UDP UDP TCP TCP Ports 3269 3268 389 389 636 636 500 4500 135 1024 - 65535 49152 - 65535

Computer Browser Application protocol NetBIOS Datagram Service NetBIOS Name Resolution NetBIOS Session Service Protocol UDP UDP TCP Ports 138 137 139

Distributed File System Application protocol Protocol Ports

NetBIOS Datagram Service NetBIOS Session Service LDAP Server LDAP Server SMB RPC Randomly allocated high TCP ports

UDP TCP TCP UDP TCP TCP TCP

138 139 389 389 445 135 1024 - 65535 49152 - 65535

File Replication Service Application protocol RPC Randomly allocated high TCP ports Protocol TCP TCP Ports 135 1024 - 65535 49152 - 65535

Kerberos Key Distribution Center Application protocol Kerberos Kerberos Kerberos Password V5 Kerberos Password V5 DC Locator Protocol TCP UDP UDP TCP UDP Ports 88 88 464 464 389

Net Logon Application protocol NetBIOS Datagram Service NetBIOS Name Resolution NetBIOS Session Service SMB LDAP RPC Protocol UDP UDP TCP TCP UDP TCP Ports 138 137 139 445 389 135, 1024 - 65535 135, 49152 - 65535

Remote Procedure Call (RPC) Application protocol RPC RPC over HTTPS NetBIOS Datagram Service NetBIOS Name Resolution NetBIOS Session Service SMB Protocol TCP TCP UDP UDP TCP TCP Ports 135 593 138 137 139 445

Server (Service Name: lanmanserver) Application protocol NetBIOS Datagram Service NetBIOS Name Resolution NetBIOS Session Service SMB Protocol UDP UDP TCP TCP Ports 138 137 139 445

Simple Mail Transfer Protocol (SMTP) (if so configured) Application protocol HTTP HTTPS Protocol TCP TCP Ports 80 443

WINS (Service Name: WINS) Application protocol NetBIOS Name Resolution WINS Replication WINS Replication Protocol UDP TCP UDP Ports 137 42 42

Windows Time Application protocol NTP SNTP Protocol UDP UDP Ports 123 123

World Wide Web Publishing Service (Service Name: W3SVC) Application protocol HTTP HTTPS Protocol TCP TCP Ports 80 443

Services that require Active Directory services Certificate Services (required for specific configurations) Application protocol RPC Randomly allocated high TCP ports Protocol TCP TCP Ports 135 1024 - 65535 49152 - 65535

DHCP Server (if so configured) (Service Name: DHCPServer) Application protocol DHCP Server MADCAP Protocol UDP UDP Ports 67 2535

Distributed File System (Service Name: DFSR) Application protocol RPC RPC Randomly allocated high TCP ports Protocol TCP TCP TCP Ports 135 5722 1024 - 65535 49152 - 65535

Distributed Link Tracking Server (optional but on by default on Windows 2000 computers) (Service Name: TrkSvr) Application protocol RPC Randomly allocated high TCP ports Protocol TCP TCP Ports 135 1024 - 65535 49152 - 65535

Distributed Transaction Coordinator (Service Name: MSDTC) Application protocol RPC Randomly allocated high TCP ports Protocol TCP TCP Ports 135 1024 - 65535 49152 - 65535

DNS Server (if so configured) (Service Name: DNS) Application protocol DNS DNS Protocol UDP TCP Ports 53 53

Fax Service (if so configured) (Service Name: Fax) Application protocol NetBIOS Session Service SMB RPC Randomly allocated high TCP ports Protocol TCP TCP TCP TCP Ports 139 445 135 1024 - 65535 49152 - 65535

File Replication Service (Service Name: NtFrs) Application protocol RPC Randomly allocated high TCP ports Protocol TCP TCP Ports 135 1024 - 65535 49152 - 65535

File Server for Macintosh (if so configured) (Service Name: MacFile) Application protocol File Server for Macintosh Protocol TCP Ports 548

Internet Authentication Service (if so configured) (Service Name: IAS) Application protocol Legacy RADIUS Legacy RADIUS RADIUS Accounting RADIUS Authentication Protocol UDP UDP UDP UDP Ports 1645 1646 1813 1812

License Logging (on by default) (Service Name: LicenseService) Application protocol NetBIOS Datagram Service NetBIOS Session Service SMB Protocol UDP TCP TCP Ports 138 139 445

Net Logon (Service Name: Netlogon) Application protocol NetBIOS Datagram Service NetBIOS Name Resolution NetBIOS Session Service SMB LDAP RPC Protocol UDP UDP TCP TCP UDP TCP Ports 138 137 139 445 389 135, 1024 - 65535 135, 49152 - 65535

Print Spooler (Service Name: Spooler) Application protocol NetBIOS Datagram Service NetBIOS Name Resolution NetBIOS Session Service SMB Protocol UDP UDP TCP TCP Ports 138 137 139 445

Remote Installation (if so configured) (Service Name: BINLSVC) Application protocol BINL Protocol UDP Ports 4011

Remote Procedure Call (RPC) Locator (Service Name: RpcLocator) Application protocol Protocol Ports

NetBIOS Datagram Service NetBIOS Name Resolution NetBIOS Session Service SMB

UDP UDP TCP TCP

138 137 139 445

Remote Storage Notification (Service Name: Remote_Storage_User_Link) Application protocol RPC Randomly allocated high TCP ports Protocol TCP TCP Ports 135 1024 - 65535 49152 - 65535

Remote Storage Server (Service Name: Remote_Storage_Server) Application protocol RPC Randomly allocated high TCP ports Protocol TCP TCP Ports 135 1024 - 65535 49152 - 65535

Routing and Remote Access (Service Name: RemoteAccess) Application protocol GRE (IP protocol 47) IPsec AH (IP protocol 51) IPsec ESP (IP protocol 50) L2TP PPTP Protocol GRE AH ESP UDP TCP Ports n/a n/a n/a 1701 1723

Server (Service Name: lanmanserver) Application protocol NetBIOS Datagram Service NetBIOS Name Resolution Protocol UDP UDP Ports 138 137

NetBIOS Session Service SMB

TCP TCP

139 445

Simple Mail Transfer Protocol (SMTP) (if so configured) (Service Name: SMTPSVC) Application protocol SMTP Protocol TCP Ports 25

Terminal Services (Service Name: TermService) Application protocol Terminal Services Protocol TCP Ports 3389

Terminal Services Licensing (Service Name: TermServLicensing) Application protocol RPC Randomly allocated high TCP ports NetBIOS Datagram Service NetBIOS Name Resolution NetBIOS Session Service SMB Protocol TCP TCP UDP UDP TCP TCP Ports 135 1024 - 65535 49152 - 65535 138 137 139 445

Terminal Services Session Directory (Service Name: Tssdis) Application protocol RPC Randomly allocated high TCP ports Protocol TCP TCP Ports 135 1024 - 65535 49152 - 65535