How do I turn back ports 389, 636, 3268, 3269, 53, 88

The following are the ports not working on one of my servers. How do I get them back on and working?? This is an isolated domain and we are not running a firewall.

TCP port 389 (ldap service): NOT LISTENING

TCP port 636 (ldaps service): NOT LISTENING

TCP port 3268 (msft-gc service): NOT LISTENING

TCP port 3269 (msft-gc-ssl service): NOT LISTENING

TCP port 53 (domain service): NOT LISTENING

TCP port 88 (kerberos service): NOT LISTENING

GCManningAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

mcsweenSr. Network AdministratorCommented:
Is this server a domain controller?  You will not see any of these services on member servers.
0
LazloHCommented:
The ports are governed by the service that is actually listening over them.  You need to check all of those services and ensure they are running and running properly.
0
GCManningAuthor Commented:
Let me give you some more background.
I have spent the last three days working with Microsoft Professional Services because I can't get the sysvol and netlogon shares to show up when I try to make 2nd server a DC. I ran a portqry for MS this morning when the server was just a member server and those ports showed "Not Listening". Which is what I thought they should. However, the MS tech told me that they needed to be listening before the replcation could complete. So now it looks like the MS Tech doesn't know what he is talking about and may just be trying to dump me off his plate!
0
Protecting & Securing Your Critical Data

Considering 93 percent of companies file for bankruptcy within 12 months of a disaster that blocked access to their data for 10 days or more, planning for the worst is just smart business. Learn how Acronis Backup integrates security at every stage

mcsweenSr. Network AdministratorCommented:
Maybe they wanted you to run the scan against you other domain controller?  Otherwise, yes, it sounds like  they are trying to dump you.
0
GCManningAuthor Commented:
So I guess now the million dollar question is has anyone out there ever have a domain that will not complete a promotion of a member to a DC. Everything seems to work and we get no errors, however the sysvol and netlogon share never get created. Any ideas out there? We have been working on this for two weeks. The last week we have been working with Microsoft but have not made any more progress.
0
mcsweenSr. Network AdministratorCommented:
1. How many other domain controllers do you have?
2. Is the primary DNS set to one of your domain controllers on the member server to be promoted?
3. Please post the results of a dcdiag on your "working" domain controller.
4. Are both servers on the same subnet and VLAN (if you use VLANs)?
5. If 4 is no, is there any firewall between the servers?
0
GCManningAuthor Commented:
Currently we only have DC and DNS is running on it. Both servers are connected to the same switch and currently there is no firewall on either server. I will have to get a current dcdiag results to post.
0
GCManningAuthor Commented:
We found out that the problem that problem was a local security setting on the PDC emulator. Microsoft had us look at everything but that. One week of chasing our tails around in circles! Microsoft however, did agree to refund our money because they did not offer any solutions.
0
ee_autoCommented:
Question PAQ'd, 500 points refunded, and stored in the solution database.
0

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
OS Security

From novice to tech pro — start learning today.