Windows Server 2003 and Windows 2000 Server
For
a mixed-mode domain that uses either Windows NT domain controllers or legacy
clients, trust relationships
between
Windows Server 2003-based domain
controllers and Windows 2000 Server-based domain
controllers
may necessitate that
all the ports for Windows NT that are listed in the previous table be
opened in addition to the following ports.
Note The two domain controllers are both in the same
forest, or the two domain controllers are both in a separate forest. Also, the trusts in the forest are
Windows Server 2003 trusts or later version trusts.
Collapse this tableExpand this table
| Client Port(s) | Server Port | Service |
|---|
| 1024-65535/TCP | 135/TCP | RPC |
| 1024-65535/TCP | 1024-65535/TCP | LSA RPC
Services (*) |
| 1024-65535/TCP/UDP | 389/TCP/UDP | LDAP |
| 1024-65535/TCP | 636/TCP | LDAP SSL |
| 1024-65535/TCP | 3268/TCP | LDAP GC |
| 1024-65535/TCP | 3269/TCP | LDAP GC SSL |
| 53,1024-65535/TCP/UDP | 53/TCP/UDP | DNS |
| 1024-65535/TCP/UDP | 88/TCP/UDP | Kerberos |
| 1024-65535/TCP | 445/TCP | SMB |
(*) To define RPC server ports that are used by the LSA RPC
services, see the "Domain controllers and Active Directory" section in the
following Microsoft Knowledge Base article:
832017
(http://support.microsoft.com/kb/832017/
)
Service overview and network port requirements for the Windows Server system
http://support.microsoft.com/kb/179442/en-us
[@more@]
How to configure a firewall for domains and trusts
来自 “ ITPUB博客 ” ,链接:https://blog.itpub.net/167898/viewspace-1023239/
,如需转载,请注明出处,否则将追究法律责任。