Hello Team ,we want to set up Entra connect (azure AD connect) , the network requirements here lists the ports between AD connect servers and domain controllers and also towards ADFS and other services, the question is , are these ports bi -directional ? for example 445 and dynamic range do we need them bi directional or what ?I do wish to know the source and destination and the direction for the ports mentioned in the official link

Hi @Hazem Elsaiegh Thank you for posting your query on Microsoft Q&A. The ports listed in the document you have shared are all ports that are required to be open on the target system / outbound from the AD Connect server i.e port 389 will need to be open on the domain controllers, the Azure AD connect sever will use dynamic ports. Let me know if this helps, if you have any further queries I would be happy to help :) Kind Regards, Donal

network ports for Entra AD connect

Accepted answer

Domooney-MSFT 2,586 Reputation points Microsoft Employee

2023-11-09T10:22:53.0433333+00:00

Hi @Hazem Elsaiegh

Thank you for posting your query on Microsoft Q&A.

The ports listed in the document you have shared are all ports that are required to be open on the target system / outbound from the AD Connect server i.e port 389 will need to be open on the domain controllers, the Azure AD connect sever will use dynamic ports.

Let me know if this helps, if you have any further queries I would be happy to help :)

Kind Regards,

Donal
Please sign in to rate this answer.
Hazem Elsaiegh 100 Reputation points

2023-11-09T12:13:55.4233333+00:00

thank you , what about 445 for example , it would be great to modify this link to includebthe direction

Domooney-MSFT 2,586 Reputation points Microsoft Employee

2023-11-10T12:24:50.1266667+00:00

Thanks for the feedback Hazem, 445 is the same situation, it needs to be open on the domain controller. I will submit a request to update the doc to include the details of where the ports need to be open.

Hazem Elsaiegh 100 Reputation points

2023-11-10T12:33:29.6+00:00

thank you so much, so we can assume that also WinRm and dynamic ports , ports for ADFS ,wep app proxy are all outbound from Entra connect server ?

Domooney-MSFT 2,586 Reputation points Microsoft Employee

2023-11-10T12:40:19.31+00:00

My pleasure Hazem, that is correct.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

network ports for Entra AD connect

0 additional answers

Your answer