When you add permissions to a resource on a trusting domain for users in a trusted domain, there are some differences between the Windows and Windows NT 4. If the computer cannot display a list of the remote domain's users, consider the following behavior:. Service overview and network port requirements for Windows is a valuable resource outlining the required network ports, protocols, and services that are used by Microsoft client and server operating systems, server-based programs, and their subcomponents in the Microsoft Windows Server system.
Administrators and support professionals may use the article as a roadmap to determine which ports and protocols Microsoft operating systems and programs require for network connectivity in a segmented network. You should not use the port information in Service overview and network port requirements for Windows to configure Windows Firewall. Skip to main content. This browser is no longer supported.
Download Microsoft Edge More info. Contents Exit focus mode. Please rate your experience Yes No. Any additional feedback? Configure the following output filters on the Internet interface of the firewall to allow the following types of traffic:. Configure the following input filters on the perimeter network interface of the firewall to allow the following types of traffic:. Configure the following output packet filters on the perimeter network interface of the firewall to allow the following types of traffic:.
Configure the following input packet filters on the perimeter network interface of the intranet firewall to allow the following types of traffic:. Configure the following output filters on the perimeter network interface of the intranet firewall to allow the following types of traffic:.
Configure the following input filters on the intranet interface of the firewall to allow the following types of traffic:. Configure the following output packet filters on the intranet interface of the firewall to allow the following types of traffic:. Skip to main content. This browser is no longer supported.
The Authentication Service issues ticket granting tickets, and the Ticket-Granting Service issues tickets for connection to computers in its own domain. The License Logging system service is a tool that was originally designed to help customers manage licenses for Microsoft server products that are licensed in the server client access license CAL model.
By default, the License Logging service is disabled in Windows Server Because of legacy design constraints and evolving license terms and conditions, License Logging may not provide an accurate view of the total number of CALs that are purchased compared to the total number of CALs that are used on a particular server or across the enterprise.
License Logging is not included in Windows Server and later operating systems. We recommend that only users of the Microsoft Small Business Server family of operating systems enable this service on their servers. The Message Queuing system service is a messaging infrastructure and development tool for creating distributed messaging programs for Windows.
These programs can communicate across heterogeneous networks and can send messages between computers that may be temporarily unable to connect to one another. Message Queuing helps provide security, efficient routing, support for sending messages within transactions, priority-based messaging, and guaranteed message delivery. The Microsoft POP3 service provides email transfer and retrieval services. Administrators can use this service to store and manage email accounts on the mail server.
When you install POP3 service on the mail server, users can connect to the mail server and can retrieve email messages by using an email client that supports the POP3 protocol, such as Microsoft Outlook. The Net Logon system service maintains a security channel between your computer and the domain controller to authenticate users and services. It passes the user's credentials to a domain controller and returns the domain security identifiers and the user rights for the user.
This is typically known as pass-through authentication. Net Logon is configured to start automatically only when a member computer or domain controller is joined to a domain. The NetMeeting Remote Desktop Sharing system service allows authorized users to use Windows NetMeeting to remotely access your Windows desktop from another personal computer over a corporate intranet.
You must explicitly enable this service in NetMeeting. You can disable or shut down this feature by using an icon that is displayed in the Windows notification area. Clients can use a news client, such as Microsoft Outlook Express, to retrieve newsgroups from the server and to read the headers or the bodies of the articles in each newsgroup. Offline Files and Roaming User Profiles cache user data to computers for offline use. These capabilities exist in all supported Microsoft operating systems.
All of these systems use SMB. Folder Redirection redirects user data from the local computer to a remote file share, using SMB. Primary Computer provides a capability to prevent data caching to computers that are not authorized by administrators for specific users. This system was added in Windows Server The Performance Logs and Alerts system service collects performance data from local or remote computers based on preconfigured schedule parameters and then writes that data to a log or triggers a message.
Based on the information that is contained in the named log collection setting, the Performance Logs and Alerts service starts and stops each named performance data collection.
This service runs only if at least one performance data collection is scheduled. The Print Spooler system service manages all local and network print queues and controls all print jobs.
Print Spooler is the center of the Windows printing subsystem. The Remote Procedure Call RPC system service is an interprocess communication IPC mechanism that enables data exchange and invocation of functionality that is located in a different process. Many services depend on the RPC service to start successfully.
By default, this service is turned off. The Remote Storage Notification system service notifies users when they read from or write to files that are available only from a secondary storage media.
Stopping this service prevents this notification. The Remote Storage system service stores infrequently used files on a secondary storage medium. If you stop this service, users cannot move or retrieve files from the secondary storage media. Although the Routing and Remote Access service can use all the following protocols, the service typically uses only a few of them. For example, if you configure a VPN gateway that is behind a filtering router, you will probably use only one protocol.
For more information about this, see the References section. The Server system service provides RPC support and file sharing, print sharing, and named pipe sharing over the network. The Server service lets users share local resources, such as disks and printers, so that other users on the network can access them.
It also enables named pipe communication between programs that are running on the local computer and on other computers. Named pipe communication is memory that is reserved for the output of one process to be used as input for another process. The input-accepting process does not have to be local to the computer. Preloaded Lmhosts entries will bypass the DNS resolver.
Windows and newer clients can work over port The SharePoint Portal Server system service lets you develop an intelligent portal that seamlessly connects users, teams, and knowledge. It helps people take advantage of relevant information across business processes. Microsoft SharePoint Portal Server provides an enterprise business solution that integrates information from various systems into one solution through single sign-on and enterprise application integration capabilities.
It accepts and queues email messages for remote destinations, and it retries at set intervals. Windows domain controllers use the SMTP service for intersite e-mail-based replication. SNMP Service includes agents that monitor activity in network devices and report to the network console workstation. SNMP Service provides a method of managing network hosts such as workstation or server computers, routers, bridges, and hubs from a centrally located computer that is running network management software.
SNMP performs management services by using a distributed architecture of management systems and agents. These messages are sent to a trap destination.
For example, an agent can be configured to start an authentication trap if an unrecognized management system sends a request for information. The trap destination must be a network-enabled host that is running SNMP management software. SSDP Discovery Service manages receipt of device presence announcements, updates its cache, and sends these notifications to clients that have outstanding search requests.
The registered event callbacks are then turned into subscription requests. SSDP Discovery Service then monitors for event notifications and sends these requests to the registered callbacks. This system service also provides periodic announcements to hosted devices.
A Telnet server supports two kinds of authentication and supports the following kinds of terminals:. Terminal Services provides a multi-session environment that enables client devices to access a virtual Windows desktop session and Windows-based programs that are running on the server.
Terminal Services enables multiple users to be connected interactively to a computer. The Terminal Services Licensing system service installs a license server and provides licenses to registered clients when the clients connect to a terminal server a server that has Terminal Server enabled. Terminal Services Licensing is a low-impact service that stores the client licenses that are issued for a terminal server and tracks the licenses that are issued to client computers or terminals.
The Terminal Services Session Directory system service enables clusters of load-balanced terminal servers to correctly route a user's connection request to the server where the user already has a session running. Users are routed to the first-available terminal server regardless of whether they are running another session in the server cluster.
You can use this service together with a cluster of terminal servers to increase the performance of a single terminal server by distributing sessions across multiple servers. Terminal Services Session Directory keeps track of disconnected sessions on the cluster and makes sure that users are reconnected to those sessions. Therefore, when you enable this port, the TFTP service receives incoming TFTP requests, but it does not let the selected server respond to those requests.
The service is free to respond to any such request from any source port, and the remote client then uses that port during the transfer. Communication is bidirectional. If you have to enable this protocol through a firewall, you may want to open UDP port 69 incoming.
You can then rely on other firewall features that dynamically let the service respond through temporary holes on any other port.
The UPnP Device Host discovery system service implements all the components that are required for device registration, control, and the response to events for hosted devices. The information that is registered that relates to a device, such as the description, the lifetimes, and the containers, are optionally stored to disk and are announced on the network after registration or when the operating system restarts.
The service also includes the web server that serves the device in addition to service descriptions and a presentation page. WINS servers are required unless all domains have been upgraded to the Active Directory directory service and unless all computers on the network are running Windows or later versions.
0コメント