We need to know which ports should be open in firewall for group policy update

Question

Dear Team,

Please advise as which port should be open in firewall for performing group policy update from active directory server.

Thanks

Best regards

Answer 1

Hi @shihasshamsudheen-6893

The remote Client install requires the following ports to be open:

RPC 135 TCP
NetBEUI name server 137 UDP
NetBEUI datagram 138 UDP
NetBEUI session 139 TCP
DCOM 445 TCP

https://www.gordano.com/knowledge-base/use-group-policy-to-open-the-required-ports-of-the-windows-firewall-for-the-remote-client-setup/

If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.

Answer 2

You can check the required ports listed here are flowing
https://learn.microsoft.com/en-us/troubleshoot/windows-server/identity/config-firewall-for-ad-domains-and-trusts
https://www.microsoft.com/en-us/download/details.aspx?id=24009

--please don't forget to Accept as answer if the reply is helpful--

Answer 3

Hello @shihasshamsudheen-6893,

Thank you for posting here.

Group policy update should communicate to DC, we should keep at least the following ports for group policy update.

For more information about AD ports and group policy update ports, we can refer to the links below.

Active Directory and Active Directory Domain Services Port Requirements
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd772723(v=ws.10)?redirectedfrom=MSDN

Active Directory Replication over Firewalls
https://learn.microsoft.com/en-us/previous-versions/windows/it-pro/windows-2000-server/bb727063(v=technet.10)?redirectedfrom=MSDN

Hope the information above is helpful.

Should you have any question or concern, please feel free to let us know.

Best Regards,
Daisy Zhou

Answer 4

Any progress or updates?

--please don't forget to Accept as answer if the reply is helpful--