Windows2008R2域控制器端口.docVIP

Windows 2008 R2域控制器端口 Windows Server 2008 R2域服务器上应该至少打开的端口。?一台Windows Server 2008 R2域服务器，启用了“文件服务”、“AD LDS”、“DNS Server”、“DHCP Server”，需要在防火墙中去打开特定端口才能为客户提供服务吗？如果需要，是否有端口列表？ ? 回答：作为Windows Server 2008 R2域服务器，我们需要配置防火墙开启下面的端口，如果该服务器也是一台DHCP的话，您还需要在开启UDP 67 和68端口： Possible Rule name Description Port Path Active Directory Domain Controller – LDAP (TCP-In) Inbound rule for the Active Directory Domain Controller service to allow remote LDAP traffic. (TCP 389) 389 %systemroot%\System32\lsass.exe Active Directory Domain Controller – LDAP (UDP-In) Inbound rule for the Active Directory Domain Controller service to allow remote LDAP traffic. (UDP 389) 389 %systemroot%\System32\lsass.exe Active Directory Domain Controller – LDAP for Global Catalog (TCP-In) Inbound rule for the Active Directory Domain Controller service to allow remote Global Catalog traffic. (TCP 3268) 3268 %systemroot%\System32\lsass.exe Active Directory Domain Controller – NetBIOS name resolution (UDP-In) Inbound rule for the Active Directory Domain Controller service to allow NetBIOS name resolution. (UDP 138) 138 System Active Directory Domain Controller – SAM/LSA (NP-TCP-In) Inbound rule for the Active Directory Domain Controller service to be remotely managed over Named Pipes. (TCP 445) 445 System Active Directory Domain Controller – SAM/LSA (NP-UDP-In) Inbound rule for the Active Directory Domain Controller service to be remotely managed over Named Pipes. (UDP 445) 445 System Active Directory Domain Controller – Secure LDAP (TCP-In) Inbound rule for the Active Directory Domain Controller service to allow remote Secure LDAP traffic. (TCP 636) 636 %systemroot%\System32\lsass.exe Active Directory Domain Controller – Secure LDAP for Global Catalog (TCP-In) Inbound rule for the Active Directory Domain Controller service to allow remote Secure Global Catalog traffic. (TCP 3269) 3269 %systemroot%\System32\lsass.exe Active Directory Domain Controller – W32Time (NTP-UDP-In) Inbound rule for the Active D