RPC Ports

[Amitgujaran]

I want some information on the RPC ports used by AD/FRS/DFSR. My knowledge is that in Windows 2003 and 2000 AD/FRS uses ports in the range of 1024-5000 and in Windows 2008 and 2008 R2 AD/FRS/DFSR use ports in the range of 49152-65535. Now, I just want to know how can these domain controllers communicate in a mixed environment? How can I do this?

[Techguru01]

You can try to follow the article on "Restricting Active Directory replication traffic and client RPC traffic to a specific port" from here - http://support.microsoft.com/kb/224196

And also "How to restrict FRS replication traffic to a specific static port" - http://support.microsoft.com/kb/319553

[Andrew]

It can be done very easily, you just need to lock down the ports to a specific port and range. Everything is handle in this same way and is what we also do. You can also check the below link on Firewall Ports needed for replication:
http://www.pbbergs.com/windows/articles.htm

[Amitgujaran]

You are trying to tell me to configure all domain controllers, irrespective of their OS 2000/2003/2008 to use a common range of ports instead of allowing 2 different ranges of ports to be opened on the firewall? So, by setting this registry key on all domain controllers would restrict all DC's to communicate on ports within this range - HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc\Internet\Ports Value 49152 - 65535