Security

Ask something
Discussion Locked

Basic Open Ports for W2000 Exch 2000

0 helpful
3 replies

by bprats

Closed to new repliesThis discussion is closed. It stays readable, but it takes no new replies.

Windows 2000 Server SP2 and Exchange 2000 SP2
PC Client is Windows XP Pro joining the domain through My Computer properties, Name Tab.

I'm experimenting with security and have closed all but the following ports as a start.

With all the ports open, I can "join" the domain.

With only the following ports open, I can't "join" the domain. Which one did I forget?

Enabled TCP/IP ports: 20 21 22 23 25 53 68 79 80 110 111 113 119 135 137 138 139 143 161? 443

There are obviously a fewmore port open than necessary so I can work through the problem for both Domain controllers with and without Exchange 2000. I'd like to repeat the project for Peer to Peer.

Thank you ....

3 replies

by timwalsh

Try 3268 and 3269 (used by Global Catalog (GC)). In order to log on to a Win2k AD domain, you must have access to a GC. This might explain your inability to join the domain.
Another one depending on your Exchange configuration - 102 (used by MTA - x.400 over TCP/IP).
In the back of the Exchange 2000 Resource Kit (Appendix B), ther is a good concise list of ports used by both Win2K Server services and Exchange 2K Server services.

This discussion is closed to new replies.