.png?width=100&auto=webp&quality=80&disable=upscale "Picture of John Savill")
.png?width=400&auto=webp&quality=80&disable=upscale "John Savill")
Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.
How can I restrict Active Directory (AD) replication traffic to a specific port?
John Savill
September 10, 2000
1 Min Read
A. By default, AD replication via remote procedure calls (RPCs) takes place dynamically over an available port via the RPC Endpoint Mapper using port 135 (the same as Microsoft Exchange). An administrator may override this functionality and specify the port that all replication traffic passes through, thereby locking down the port.
To set a specific port, perform the following steps:
Start a registry editor (e.g., regedit.exe).
Go to HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesNTDSParameters.
From the edit menu, select New, DWORD Value.
Enter a name of TCP/IP Port, and press Enter.
Double-click TCP/IP Port, set the value to the desired port, then click OK.
Close the registry editor.
Reboot the domain controller.
Because some routers filter packets, administrators should confirm that they don't filter out any intermediate network devices or software that filters packets between domain controllers.
About the Author
You May Also Like
.jpg?width=700&auto=webp&quality=80&disable=upscale)
