You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Refer to the list of required ports in [How to configure a firewall for Active Directory domains and trusts](config-firewall-for-ad-domains-and-trusts.md).
48
+
Refer to the list of required ports in [How to configure a firewall for Active Directory domains and trusts](config-firewall-for-ad-domains-and-trusts.md).
49
49
50
50
2. Test the connection between the client and the DC by running the following cmdlet:
The output indicates that the LDAP port TCP 389 is open between the client and the DC.
67
+
The output indicates that the LDAP port TCP 389 is open between the client and the DC.
68
68
69
69
3. Identify if a port (TCP/UDP) is blocked on a DC by using the [PortQry](https://www.microsoft.com/download/details.aspx?id=17148) command-line tool. For more information, see [Using the PortQry command-line tool](../networking/portqry-command-line-port-scanner-v2.md).
70
70
71
-
Here are some example syntaxes:
72
-
73
-
-`portqry -n <problem_server> -e 135`
74
-
-`portqry -n <problem_server> -e 445`
75
-
-`portqry -n <problem_server> -e 389`
76
-
-`portqry -n <problem_server> -p UDP -e 389`
77
-
-`portqry -n <problem_server> -r 49152:65535`
78
-
79
-
Here are some example outputs:
80
-
81
-
If the connection to TCP 135 port on the DC is blocked, you see the following output:
82
-
83
-
```output
84
-
C:\PortQryV2>portqry -n dc2 -e 135
85
-
Querying target system called:
86
-
Dc2
87
-
Attempting to resolve name to IP address…
88
-
Name resolved to 192.168.1.2
89
-
querying...
90
-
TCP port 135 <epmap service>: FILTERED
91
-
```
92
-
93
-
If the connection to TCP 389 port on the DC is successful, you see the following output:
94
-
95
-
```output
96
-
C:\PortQryV2>portqry -n dc2 -e 389
97
-
Querying target system called:
98
-
Dc2
99
-
Attempting to resolve name to IP address…
100
-
Name resolved to 192.168.1.2
101
-
querying...
102
-
TCP port 389 <ldap service>: LISTENING
103
-
```
71
+
Here are some example syntaxes:
72
+
73
+
- `portqry -n <problem_server> -e 135`
74
+
- `portqry -n <problem_server> -e 445`
75
+
- `portqry -n <problem_server> -e 389`
76
+
- `portqry -n <problem_server> -p UDP -e 389`
77
+
- `portqry -n <problem_server> -r 49152:65535`
78
+
79
+
Here are some example outputs:
80
+
81
+
If the connection to TCP 135 port on the DC is blocked, you see the following output:
82
+
83
+
```output
84
+
C:\PortQryV2>portqry -n dc2 -e 135
85
+
Querying target system called:
86
+
Dc2
87
+
Attempting to resolve name to IP address…
88
+
Name resolved to 192.168.1.2
89
+
querying...
90
+
TCP port 135 <epmap service>: FILTERED
91
+
```
92
+
93
+
If the connection to TCP 389 port on the DC is successful, you see the following output:
94
+
95
+
```output
96
+
C:\PortQryV2>portqry -n dc2 -e 389
97
+
Querying target system called:
98
+
Dc2
99
+
Attempting to resolve name to IP address…
100
+
Name resolved to 192.168.1.2
101
+
querying...
102
+
TCP port 389 <ldap service>: LISTENING
103
+
```
104
104
105
105
To determine if there're any further network connectivity problems, collect a network monitor trace if necessary when reproducing the issue.
0 commit comments