This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(156.8, 50%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ERA%3C/text%3E%3C/svg%3E)
What is the purpose of outbound connection\communication from Domain controller (from source port:- 55948,55947 or any dynamic port) to client machine on destination port TCP 445 (Microsoft-ds)?
Raj.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(128, 8%, 22%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA%3C/text%3E%3C/svg%3E)
You'll find the AD related ports listed here.
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/config-firewall-for-ad-domains-and-trusts#windows-server-2008-and-later-versions
--please don't forget to upvote and Accept as answer if the reply is helpful--
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--
Thanks much for the Article DSPatrick but I don't get any reference which specifies Connection\communication from Domain Controller to Client Machine on port 445.
Maybe some other process. You could
netstat -aon
then use Task Manager\Processes tab to lookup the PID and process name responsible.
--please don't forget to upvote and Accept as answer if the reply is helpful--
I just checked a 2016 and a 2022 domain controller and did not find any Foreign Address connections to port 445. I do however have the system process listening on 445 (SMB) Might also check the destination pc for clues.
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--
Not yet, All DCs are still having outbound connection to Client Servers on Port 445 with PID as 4 (System Process).
Did you read what I wrote above? Doesn't appear to be related to active directory domain services.
--please don't forget to upvote and Accept as answer if the reply is helpful--
Just a reminder, please don't forget to close up the thread by 
Just checking if there's any progress or updates?
--please don't forget to upvote and Accept as answer if the reply is helpful--
