none
Narrow RD Licensing Server Dynamic Ports Range

    Question

  • Hi,

    As the RDS 2012 requirement, the RDS Licensing server needs to open dynamic ports TCP 49152 - 65535: https://social.technet.microsoft.com/wiki/contents/articles/16164.which-ports-are-used-by-a-rds-2012-deployment.aspx. For security reason I need narrow the dynamic ports to a smaller range for our firewall.

    Following MS KB: https://support.microsoft.com/en-us/kb/929851

     I use the cmd: netsh int ipv4 set dynamicport tcp start=51000 num=255, and same to ipv4 udp, ipv6 tcp, and ipv6 udp, after rebooting the RD Licensing server I found that the dynamic ports of DCE/RPC are still generated as before as 49xxx not between 51000 and 51254.

    Following another MS KB:  https://support.microsoft.com/en-us/kb/154596

    I configured in registry key: HKLM\Software\Microsoft\Rpc\Internet and added values as:

    Ports: REG_MULTI_SZ: 51000-51254 PortsInternetAvailable: REG_SZ: Y UseInternetPorts: REG_SZ: Y

    After rebooting the RD Licensing server I found that the RDSH server cannot communicate to RD Licensing server any more.

    How can I setup RD Licensing server dynamic ports into a smaller range?


    Tuesday, September 20, 2016 8:33 PM

Answers

All replies