Article ID: 179442 - View products that this article applies to.
This article was previously published under Q179442
If you are a Small Business customer, find additional troubleshooting and learning resources at the Support for Small Business site.
Expand all | Collapse all

On This Page

Summary

This article describes how to configure a firewall for domains and trusts.

Collapse this imageExpand this image
2683283
Note: Not all the ports that are listed in the tables here are required in all scenarios. For example, if the firewall separates members and DCs, you don't have to open the FRS or DFSR ports. Also, if you know that no clients use LDAP with SSL/TLS, you don't have to open ports 636 and 3269.

More information

To establish a domain trust or a security channel across a firewall, the following ports must be opened. Be aware that there may be hosts functioning with both client and server roles on both sides of the firewall. Therefore, ports rules may have to be mirrored.

Windows NT

Click here to show/hide solution

Windows Server 2003 and Windows 2000 Server

Click here to show/hide solution

Windows Server 2008 and Windows Server 2008 R2

Click here to show/hide solution

Active Directory

Click here to show/hide solution

Properties

Article ID: 179442 - Last Review: August 10, 2012 - Revision: 20.0
Applies to
  • Windows Server 2008 Datacenter
  • Windows Server 2008 Enterprise
  • Windows Server 2008 Standard
  • Windows Server 2008 R2 Datacenter
  • Windows Server 2008 R2 Enterprise
  • Windows Server 2008 R2 Standard
  • Microsoft Windows Server 2003, Standard Edition (32-bit x86)
  • Microsoft Windows Server 2003, Enterprise Edition (32-bit x86)
  • Microsoft Windows Server 2003, Datacenter Edition (32-bit x86)
  • Microsoft Windows 2000 Server
  • Microsoft Windows 2000 Advanced Server
  • Microsoft Windows 2000 Professional Edition
  • Microsoft Windows NT Server 4.0 Standard Edition
  • Windows Server 2008 Datacenter without Hyper-V
  • Windows Server 2008 Enterprise without Hyper-V
  • Windows Server 2008 for Itanium-Based Systems
  • Windows Server 2008 Foundation
  • Windows Web Server 2008 R2
Keywords: 
kbenv kbhowto kbnetwork KB179442

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com