What firewall ports to use DSA.msc from a trusted domain?

Question

Domain A trusts domain B.

I want to open DSA.msc in domain B and use it to manage Domain A.

I can do this from the domain controllers, but not anywhere else - and I need to make this available from a jump server/PAW.

Is it ALL the domain trust port list that needs opened? Or is there a shorter list for using DSA?

I'm afraid its ALL - but need to confirm.

Answer 1

You'll find the list here. You can trial and error some subset to see if things can work out for you.

https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/config-firewall-for-ad-domains-and-trusts#windows-server-2008-and-later-versions

 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

All or almost all of the ports in the AD Trust list are needed. If I get a chance to ask my network team what the exact results were I will post back. They used a firewall feature to detect the port usage. Fancy.