Don't use the port information in this article to configure Windows Firewall. The Windows Server system includes a comprehensive and integrated infrastructure to meet the requirements of developers and information technology IT professionals.
This system runs programs and solutions that you can use to obtain, analyze, and share information quickly and easily. These Microsoft client, server, and server program products use different network ports and protocols to communicate with client systems and with other server systems over the network. Dedicated firewalls, host-based firewalls, and Internet Protocol security IPsec filters are other important components that you must have to help secure your network.
However, if these technologies are configured to block ports and protocols that are used by a specific server, that server will no longer respond to client requests. The System services ports section:. The Ports and protocols section includes a table that summarizes the information from the System services ports section.
The table is sorted by the port number instead of by the service name. Use this section to quickly determine which services listen on a particular port. This article uses certain terms in specific ways. To help avoid confusion, make sure that you understand how the article uses these terms:. This article doesn't specify which services rely on other services for network communication.
A full discussion of the architecture of the Windows operating systems is beyond the scope of this article. Although many services may rely on a particular TCP or UDP port, only one service or process at a time can listen on that port. These ports are also informally known as random RPC ports. In these cases, RPC clients rely on the RPC endpoint mapper to tell them which dynamic port or ports were assigned to the server.
You can also restrict the range of ports that RPC dynamically assigns to a small range, regardless of the service. For more information about this topic, see the References section. This article includes information about the system services roles and the server roles for the Microsoft products that are listed in the Applies to section. Although this information may also apply to Windows XP and to Microsoft Windows Professional, this article is focused on server-class operating systems.
Therefore, this article describes the ports that a service listens on instead of the ports that client programs use to connect to a remote system. This section provides a description of each system service, includes the logical name that corresponds to the system service, and displays the ports and the protocols that each service requires. Active Directory runs under the Lsass. Domain controllers, client computers, and application servers require network connectivity to Active Directory over specific hard-coded ports.
Additionally, unless a tunneling protocol is used to encapsulate traffic to Active Directory, a range of ephemeral TCP ports between to and to are required. If your computer network environment uses only Windows Server R2, Windows Server , Windows 7, or Windows Vista, you must enable connectivity over the high port range of through If your computer network environment uses Windows Server R2, Windows Server , Windows 7, or Windows Vista together with versions of Windows earlier than Windows Server and Windows Vista, you must enable connectivity over both port ranges: High port range of through Low port range of through If your computer network environment uses only versions of Windows earlier than Windows Server and Windows Vista, you must enable connectivity over the low port range of through In this encapsulated scenario, you must allow the following items through the router instead of opening all the ports and protocols listed in this topic:.
Finally, you can hard-code the port that is used for Active Directory replication by following the steps in Restricting Active Directory RPC traffic to a specific port.
The following settings are LDAP session options:. FTP is the only network protocol that has a plug-in that is included with Windows Server. The ALG FTP plug-in supports these sessions by redirecting all traffic that meets the following criteria to a private listening port in the range of to on the loopback adapter:. NET out-of-process session states. NET State Service stores session data out-of-process. The service uses sockets to communicate with ASP. NET that is running on a web server.
Certificate Services is part of the core operating system. By using Certificate Services, a business can act as its own certification authority CA.
It lets the business issue and manage digital certificates for programs and protocols such as:. For more information, see 3. The Cluster service controls server cluster operations and manages the cluster database.
A cluster is a collection of independent computers that act as a single computer. Managers, programmers, and users see the cluster as a single system.
The software distributes data among the nodes of the cluster. If a node fails, other nodes provide the services and data that were formerly provided by the missing node. When a node is added or repaired, the cluster software migrates some data to that node. By default, DTLS is enabled.
The Computer Browser system service maintains an up-to-date list of computers on your network and supplies the list to programs that request it. The Computer Browser service is used by Windows-based computers to view network domains and resources.
Computers that are designated as browsers maintain browse lists that contain all shared resources that are used on the network. Earlier versions of Windows-based programs, such as My Network Places, the net view command, and Windows Explorer, all require browsing capability. For example, when you open My Network Places on a computer that is running Microsoft Windows 95, a list of domains and computers appears.
To display this list, the computer obtains a copy of the browse list from a computer that is designated as a browser. If you are running only Windows Vista and later versions of Windows, the browser service is no longer required. You can use this service to adjust the advanced network settings of DHCP clients.
The Distributed File System Replication DFSR service is a state-based, multi-master file replication engine that automatically copies updates to files and folders between computers that are participating in a common replication group. It is not used on a Windows Server domain controller. The Distributed Link Tracking Server system service stores information so that files that are moved between volumes can be tracked to each volume in the domain.
The Distributed Link Tracking Server service runs on each domain controller in a domain. Check for Log4j vulnerabilities with this simple-to-use script. TasksBoard is the kanban interface for Google Tasks you've been waiting for. Paging Zefram Cochrane: Humans have figured out how to make a warp bubble. Show Comments. Hide Comments. My Profile Log out. Thanks I need this. Had the firewall off and did not know that the windows firewall had it blocked even when turned off.
I wish I could say that this cured the problem but no, it didn't. The only connedtion possible is with the firewall turned off. Thanks for the simple how to. We had to kill the Windows Firewall service to actually stop it from blocking connections. I open the port for That iss the port the server is using for localhost. Guys, please help. I need to open port for my Domain Controller to communicate with nagios to provide critical info and I don't know what's wrong.
I did the steps above and also turned off the Firewall but it does not work. I have created a rule that permits any any IP on that port and it's in vain. Error is Thanks. Viewed 68k times. Xharze 2, 2 2 gold badges 15 15 silver badges 30 30 bronze badges. Olga91 Olga91 2 2 gold badges 2 2 silver badges 7 7 bronze badges. Add a comment. Active Oldest Votes. You may have to add the -Pn tag incase the port is hidden. Rohan Durve Rohan Durve 2 2 silver badges 14 14 bronze badges. How can i open it?
That's weird. Asper nMap the port is open, but asper YouGetSignal it's closed.
0コメント