Communication Ports for Active Roles (30256)

This article outlines the ports used by Active Roles and Synchronization Service.

The following ports are used by Active Roles and Synchronization Service.

Active Roles Administration Service:

• 15172 TCP Inbound

Starling Connect Notifications Pane:

The appropriate port must be open from the client browser inbound to the Active Roles Administration Service hosts.

• 7465 (HTTP) TCP Inbound
• 7466 (HTTPS) TCP Inbound

Synchronization Service:

• 15173 TCP Inbound

Synchronization Service Capture Agent (Installed on Domain Controllers):  

• 7148 TCP Inbound

Communicating with Azure:

Active Roles Administration Service host must be able to resolve and access the following URLs:

https://login.microsoftonline.com/

https://graph.microsoft.com/

https://graph.windows.net/

______________________________________________________________________________________________________________

Active Roles may communicate with the following services. The associated ports listed below are required to be open for inbound communication to the appropriate service.

* Required services for standard Active Roles functionality of managing a Active Directory domain.
** Optional

DNS*:

• 53 TCP/UDP

Web Interface**:

• 80 (HTTP) TCP
• 443 (HTTPS) TCP

SQL Server*:

• 1433 (default SQL instance) TCP
• 1434 (SQL Server Browser service) UDP

Domain Controllers*:

• 88 (Kerberos) TCP/UDP
• 135 (RPC endpoint mapper) TCP
• 139 (SMB/CIFS) TCP
• 445 (SMB/CIFS) TCP
• 389 (LDAP) TCP/UDP
• 3268 (Global Catalog LDAP) TCP
• 636 (LDAP SSL) TCP
• 3269 (Global Catalog LDAP SSL) TCP

A dynamically allocated TCP port for RPC communication with the Global Catalog Server. See http://support.microsoft.com/kb/224196 for instructions on how to configure Active Directory to use a predefined port number for RPC communication.

Managed AD LDS instances**:

• The TCP port used for LDAP communication with the AD LDS server is configurable in the Add Managed AD LDS Instance Wizard.

Exchange Servers**:

• 135 (RPC endpoint mapper) TCP
• 808 (Mailbox Replication Service) TCP

Computer Resource Management & Home Folder Provisioning/Deprovisioning**:

• 139 (SMB/CIFS) TCP
• 445 (SMB/CIFS) TCP

Computer restart**:

• 139 (SMB/CIFS) TCP
• 137 (WINS) UDP
• 138 (NetBIOS) UDP