Need to know which ports to open in firewall for changing ad users passwords .

Question

Dear Team,

In our organization users can change their ad passwords by clicking alt+cntl+delete when they are in LAN. when users are connected to the vpn , they cant change the ad passwords. Because the port is not opened in firewall.

Please advise as which port should be open in firewall for ad password changing purpose

Answer 1

Hi @shihasshamsudheen-6893
Thank You for posting in Q & A.

UDP 389, UDP/TCP 88, and UDP/TCP 464 (password change requests) ports are open for the domain controllers in the user domain.
refer - https://learn.microsoft.com/en-us/archive/blogs/activedirectoryua/conditions-for-kerberos-to-be-used-over-an-external-trust

If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.

Answer 2

You can check the required ports are flowing
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/config-firewall-for-ad-domains-and-trusts
https://www.microsoft.com/en-us/download/details.aspx?id=24009

--please don't forget to Accept as answer if the reply is helpful--