Network ports required by file server for clients coming through AD trust

Question

Hi,

I have a question regarding network ports required by file servers for clients coming from other domains through trust.

Below is the diagram.

A client in Domain A is trying to access files from a file server in Domain B. So my question is, what network ports will be required to open from the file server to the DC of Domain A?

Thanks,

Answer 1

Hello

Greetings!

You should enter the credentials, this is normal.

Best Regards,
Daisy Zhou

Answer 2

Hello

Greetings!

I think you should open at least the three ports below on file server in domain B.

Best Regards，
Daisy Zhou

Answer 3

Hi,

Thanks, we have enabled the mentioned ports, and trust is established.

However, I get an authentication popup when I try to grant folder permissions on Fileserver in Domain B by looking up users in Domain A through trust.

And when I enter my Domain A credentials, it can check names. Please advise if this is normal.

Or I shouldn't get the authentication prompt since the trust is in place.

Answer 4

Hello Azhar Rahman,

Thank you for posting in Microsoft Community forum.

 Is the trust between domain A and Domain B two-way trust?

Or at least Domain B trusts Domain A, then the users in domain A can access the resource in domain B.

You can open the ports with "trust key word" below.

https://answers-afd.microsoft.com/static/images/image-not-found.jpg[Active Directory and Active Directory Domain Services Port Requirements | Microsoft Learn](https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd772723%28v=ws.10%29?redirectedfrom=MSDN "learn.microsoft.com")

Active Directory Replication over Firewalls | Microsoft Learn

I hope the information above is helpful.

If you have any question or concern, please feel free to let us know.

Best Regards,

Daisy Zho

Answer 5

Hi Daisy,

thanks,

And what ports would be required to open from the file server to the DC of Domain A?

This is required to grant file permissions on the file server of domain B to users in domain A

Best regards,