Hi,
We have domain in US which is behind a firewall. We need to join the machines in offshore(India) to US domain without any BDC(ADC) in the India. What are the TCP/IP ports needs to be opened in the firewall in US.
Regards,
Jawahar. K
This Question has been solved and asker verified All Experts Exchange premium technology solutions are available to subscription members.
Experts Exchange has been collecting answers to technology questions since 1996…3 million and counting! If you have a question, chances are we already have your answer.
If you can't find the exact answer you're looking for, ask our exclusive community of 50,000 experts. You’ll get a personalized answer from a trusted professional.
Thousands of free tech tips, tricks, how-to’s and tutorials are available in our peer reviewed articles section. See for yourself how smart our experts are, no login required.
Save solutions to your questions, answers you’ve discovered through searching plus helpful articles in your personal knowledgebase for easy future access.
Access the answers to your technology questions today.
30-day free trial. Register in 60 seconds.
Members of the expert community talk about why the experience at Experts Exchange is different than what you will find anywhere else.
Try it out and discover for yourself.
30-day free trial. Register in 60 seconds.
Join the community of experts here and help other tech pros by answering question in your area of expertise. You can earn FREE access to all Experts Exchange's premium features and resources.
TCP Ports Used by OLAP Services when Connecting Through a Firewall
http://support.microsoft.c
Setting TCP/IP Ports for Exchange and Outlook Client Connections Through a Firewall
http://support.microsoft.c
TCP Ports Needed for Communication to SQL Server Through a Firewall
http://support.microsoft.c
You Can Connect with Telnet to Any IP Address on Port 389
http://support.microsoft.c
Yes there are many ports to choose from
:o) "help your self" or specify what you are going to use
Comprehensive NMAP Port List
http://www.avaren.com/nmap
" to join to the domain overthe firewall"
If joining the domain means that you want to logon and have your logonscript and resources as if you were in US. You can't without a way to connect, as specified by me and JUDHI above.
So how do you want to connect - I assume the most secure way is to use VPN
Virtual Private Networking: An Overview
http://www.microsoft.com/w
Microsoft Privacy Protected Network Access: Virtual Private Networking and Intranet Security
http://www.microsoft.com/w
If you have low bandwith use Remote Desktop (read all 4 pages):
http://www.microsoft.com/w
Remote Desktop works well even over low–bandwidth Internet connections, because only the keyboard input, mouse input, and display output data are transmitted over the network to your remote location.
Remote desktop also uses port 3389 (default), but you can change it if you want
Configuring the Remote Desktop Client to Connect to a Specific Port
http://support.microsoft.c
If you change the default Remote Desktop port to another, then don't use a port number used by hackers
List of known Trojan/Backdoors and the TCP/UDP ports on which they operate
http://www.onctek.com/troj
1024-65535/TCP 135/TCP RPC *
137/UDP 137/UDP NetBIOS Name
138/UDP 138/UDP NetBIOS Netlogon and Browsing
1024-65535/TCP 139/TCP NetBIOS Session
1024-65535/TCP 42/TCP WINS Replication
Windows 2000
For a mixed-mode domain with either Windows NT domain controllers or legacy clients or trust relationship between two windows 2000 domain controllers which are not in the same forest, all of the preceding ports for Windows NT may need to be opened in addition to the following ports:
Client Port(s) Server Port Service
1024-65535/TCP 135/TCP RPC *
1024-65535/TCP/UDP 389/TCP/UDP LDAP
1024-65535/TCP 636/TCP LDAP SSL
1024-65535/TCP 3268/TCP LDAP GC
1024-65535/TCP 3269/TCP LDAP GC SSL
53,1024-65535/TCP/UDP 53/TCP/UDP DNS
1024-65535/TCP/UDP 88/TCP/UDP Kerberos
1024-65535/TCP 445/TCP SMB
NOTE: There are specific requirements for RPC communication beyond what is listed in this table. For additional information about how to configure RPC communications for a firewall, click the article number below to view the article in the Microsoft Knowledge Base:
154596 Configuring RPC Dynamic Port Allocation to Work With Firewall
By default, Windows 2000 DNS servers use ephemeral client-side ports when they query other DNS servers. However, this behavior may be modified with a specific registry setting that is described in the following article in the Microsoft Knowledge Base:
260186 SendPort DNS Registry Key Does Not Work as Expected
Alternatively, you can establish a trust through the Point-to-Point Tunneling Protocol (PPTP) compulsory tunnel, and this will limit the number of ports that the firewall will need to open. For PPTP, the following ports must be enabled:
Client Ports Server Port Protocol
1024-65535/TCP 1723/TCP PPTP
In addition, you would need to enable IP PROTOCOL 47 (GRE).
Note: When you add permissions to a resource on a trusting domain for users in a trusted domain, there are some differences between the Windows 2000 and Windows NT 4.0 behavior. If the computer is not able to bring up a list of the remote domain's users:
Windows NT 4.0 tries to resolve manually-typed names by contacting the PDC for the remote user's domain (UDP 138). If that communication fails, a Windows NT 4.0-based computer contacts its own PDC, and then asks for resolution of the name.
Windows 2000 also tries to contact the remote user's PDC for resoution over UDP 138, but does not fall back on using its own PDC. Make sure that all Windows 2000-based member servers that will be granting access to resources have UDP 138 connectivity to the remote PDC.
kjawahar:
This old question needs to be finalized -- accept an answer, split points, or get a refund. For information on your options, please click here-> http:/help/closing.jsp#1
EXPERTS:
Post your closing recommendations! No comment means you don't care.
Business Accounts
Answer for Membership
by: trywaredkPosted on 2003-06-05 at 00:34:48ID: 8654834
Depends on how you connect. Are you using VPN, Remote Desktop or VNC ?
Please specify - Each method uses different ports
Will VNC work through a firewall?
http://www.uk.research.att
Using Remote Desktop (read all 4 pages):
http://www.microsoft.com/w
Remember to Enforce a Remote Access Security Policy in Windows 2000
http://support.microsoft.c
Many Regards
Jorgen Malmgren
IT-Supervisor
Denmark
:o) Your brain is like a parachute. It works best when it's open