What firewall ports need to be open for Active Directory?

Firewall ports to open for Active Directory communication

Port Number	Description	Port Type
445	SMB	TCP
389	LDAP	TCP + UDP
53	DNS	UDP
135	RPC	TCP

What ports should be open on domain controller?

Both UDP and TCP Port 135 are required for communication between domain controllers and clients to domain controllers. TCP Port 139 and UDP 138 network ports are used by the SYSVOL replication service to replicate contents of SYSVOL folder.

How do I allow a domain through firewall?

Whitelisting with the Windows Firewall To manage the whitelist in the Windows Firewall, click Start, type firewall and click Windows Firewall. Click Allow a program or feature through Windows Firewall (or, if you’re using Windows 10, click Allow an app or feature through Windows Firewall).

What port must be opened for LDAP on a firewall?

LDAP uses port 389 and LDAP with SSL uses port 636.

Is port 389 TCP or UDP?

LDAP
LDAP is an application layer protocol that uses port 389 via TCP or user datagram protocol (UDP).

What ports are needed for Active Directory?

Contains a brief description of each service.

Displays the logical name of each service.

Indicates the ports and protocols that each service requires for correct operation.

What are ports used for Active Directory?

Active Directory/LSA

Computer Browser

Distributed File System Namespaces

Distributed File System Replication (if not using FRS for SYSVOL replication)

File Replication Service (if not using DFSR for SYSVOL replication)

Kerberos Key Distribution Center

Net Logon

Remote Procedure Call (RPC)

Server

Simple Mail Transfer Protocol (SMTP)

What is a domain controller?

In computer networking terms, a domain controller is a computer server that manages the login credentials, printers and shared resources within a Windows domain. The domain is the entire network of computers including the domain controller and all the client computers.

What is the default Active Directory port?

• TCP 5007 (The default Windows User-ID Agent service port number is 5007, though it is Ports Used for Active Directory Protocols and User-ID Communications to Firewall • Agentless User-ID uses WMI to pull security logs that initially use port 389, but then negotiate using dynamic random ports for data. Hence, allow all ports need to be allowed.