活动目录在微软的产品架构中占有举足轻重的地位,活动目录作为微软产品的粘合剂将微软的全系列产品融合在一起,从而能够为企业提供整套的解决方案,因此了解活动目录就有很重要的意义,而了解活动目录使用的端口,对活动目录的排错等也就有一定的意义,现将活动目录使用到的端口列在下表中:
Protocol and Port
| AD and AD DS Usage
| Type of traffic
|
TCP and UDP 389
| Directory, Replication, User and Computer Authentication, Group Policy, Trusts | LDAP |
TCP 636
| Directory, Replication, User and Computer Authentication, Group Policy, Trusts | LDAP SSL |
TCP 3268
| Directory, Replication, User and Computer Authentication, Group Policy, Trusts | LDAP GC |
TCP 3269
| Directory, Replication, User and Computer Authentication, Group Policy, Trusts | LDAP GC SSL |
TCP and UDP 88
| User and Computer Authentication, Forest Level Trusts | Kerberos |
TCP and UDP 53
| User and Computer Authentication, Name Resolution, Trusts | DNS |
TCP and UDP 445
| Replication, User and Computer Authentication, Group Policy, Trusts | SMB,CIFS,SMB2, DFSN, LSARPC, NbtSS, NetLogonR, SamR, SrvSvc |
TCP 25
| Replication | SMTP |
TCP 135
| Replication | RPC, EPM |
TCP Dynamic
| Replication, User and Computer Authentication, Group Policy, Trusts | RPC, DCOM, EPM, DRSUAPI, NetLogonR, SamR, FRS |
TCP 5722
| File Replication | RPC, DFSR (SYSVOL) |
UDP 123
| Windows Time, Trusts | Windows Time |
TCP and UDP 464
| Replication, User and Computer Authentication, Trusts | Kerberos change/set password |
UDP Dynamic
| Group Policy | DCOM, RPC, EPM |
UDP 138
| DFS, Group Policy | DFSN, NetLogon, NetBIOS Datagram Service |
TCP 9389
| AD DS Web Services | SOAP |
UDP 67 and UDP 2535
| DHCP | DHCP, MADCAP |
UDP 137
| User and Computer Authentication, | NetLogon, NetBIOS Name Resolution |
TCP 139
| User and Computer Authentication, Replication | DFSN, NetBIOS Session Service, NetLogon |
详细参见Technet网站:http://technet.microsoft.com/en-us/library/dd772723(WS.10).aspx
转载于:https://blog.51cto.com/telnetport/682908