Active Directory and local Firewalls

19 Mar 2009 8:48 AM

Niklas Ramstedt

I have a problem at work with some machines that have F-Secure Client
Security installed and the firewall engine running. It seems like the
machines refuse to talk to the domain with the FW activated. I think I
accidentally might have blocked some processes or ports within the program.

I need to now what processes and ports should be allowed to pass through the
FW in order for a machine to work correctly in a domain.

Thanks

19 Mar 2009 9:25 AM

Meinolf Weber [MVP-DS]

Hello Niklas,

Check out this articles:
http://support.microsoft.com/kb/555381

http://support.microsoft.com/kb/179442/

Best regards

Meinolf Weber
Disclaimer: This posting is provided "AS IS" with no warranties, and confers
no rights.
** Please do NOT email, only reply to Newsgroups
** HELP us help YOU!!! http://www.blakjak.demon.co.uk/mul_crss.htm

Show quoteHide quote

> I have a problem at work with some machines that have F-Secure Client
> Security installed and the firewall engine running. It seems like the
> machines refuse to talk to the domain with the FW activated. I think I
> accidentally might have blocked some processes or ports within the
> program.
>
> I need to now what processes and ports should be allowed to pass
> through the FW in order for a machine to work correctly in a domain.
>
> Thanks
>

19 Mar 2009 12:41 PM

Paul Bergson [MVP-DS]

Check out an article I have on this. It covers both dc's and their clients.

http://www.pbbergs.com/windows/articles.htm
Select Firewall Ports Needed for Replication

--
Paul Bergson
MVP - Directory Services
MCTS, MCT, MCSE, MCSA, Security+, BS CSci
2008, 2003, 2000 (Early Achiever), NT4

http://www.pbbergs.com

Please no e-mails, any questions should be posted in the NewsGroup This
posting is provided "AS IS" with no warranties, and confers no rights.

Show quoteHide quote

"Niklas Ramstedt" <NiklasRamst***@discussions.microsoft.com> wrote in
message news:391E0EBA-7B55-4C70-A761-D5AD4ADE72AD@microsoft.com...
>I have a problem at work with some machines that have F-Secure Client
> Security installed and the firewall engine running. It seems like the
> machines refuse to talk to the domain with the FW activated. I think I
> accidentally might have blocked some processes or ports within the
> program.
>
> I need to now what processes and ports should be allowed to pass through
> the
> FW in order for a machine to work correctly in a domain.
>
> Thanks

19 Mar 2009 4:05 PM

Ace Fekay [Microsoft Certified Trainer]

In news:391E0EBA-7B55-4C70-A761-D5AD4ADE72AD@microsoft.com,

Niklas Ramstedt <NiklasRamst***@discussions.microsoft.com>, posted the
following:

> I have a problem at work with some machines that have F-Secure Client
> Security installed and the firewall engine running. It seems like the
> machines refuse to talk to the domain with the FW activated. I think I
> accidentally might have blocked some processes or ports within the
> program.
>
> I need to now what processes and ports should be allowed to pass
> through the FW in order for a machine to work correctly in a domain.
>
> Thanks

As indicated by Paul and Meinolf, there are numerous ports, specifically 29
ports + UDP 1024-5000. The best way is to allow exceptions for all traffic
for the appropriate machines instead of trying to open up all of these
ports.

--
Ace

This posting is provided "AS-IS" with no warranties or guarantees and
confers no rights.

Ace Fekay, MCSE 2003 & 2000, MCSA 2003 & 2000, MCSA Messaging, MCT
Microsoft Certified Trainer
ace***@mvps.RemoveThisPart.org

For urgent issues, you may want to contact Microsoft PSS directly. Please
check http://support.microsoft.com for regional support phone numbers.