luisfeliz79 / checkdcports.ps1

A script to check Active Directory Domain Services required ports

CheckDCPorts.ps1

A script to check Active Directory Domain Services required ports

Examples:

• Check fort open/closed ports for every DC in the domain

  .\CheckDCPorts.ps1 -Domain contoso.com

• Check for Latency only to every DC in the domain

  .\CheckDCPorts.ps1 -LatencyOnly -Domain contoso.com

• Check only against a particular server or servers

  .\CheckDCPorts.ps1 -Server DC1.contoso.com

  .\CheckDCPorts.ps1 -Server DC1.contoso.com,DC2.contoso.com

  .\CheckDCPorts.ps1 -Server DC1.contoso.com,DC2.contoso.com -LatencyOnly

Notes:

• Run it on a DC to check DC to DC communication, or a server/client to check Client to DC communication.

• The -Domain parameter requires the PowerShell AD module to be installed -part of AD RSAT (activedirectory)

• Ports checked are:

  • 88 Kerberos
  • 389 LDAP
  • 636 LDAPS
  • 445 SMB
  • 3268 Global Catalog LDAP
  • 3269 Global Catalog LDAPs
  • 139 NetBIOS SSN
  • 464 Kerberos Password Change
  • 5722 WS 2008 R2 and below DFSR
  • 9389 PowerShell GET-AD* CmdLets
  • 5985 PowerShell Remoting
  • 5986 PowerShell Remoting over SSL
  • 123 NTP
  • 53 DNS

Sample Screenshot