RPC by default can grab any dynamic port above 1024. Security sometimes may ask you to limit that to a much narrower range. A the minimum you should have about 100-200 ports available for RPC communication. Here is the registry setting: HKEY_LOCAL_MACHINE\Software\Microsoft\Rpc Ports: REG_MULTI_SZ: 5000-5100 PortsInternetAvailable: REG_SZ: Y UseInternetPorts: REG_SZ: Y Full MS KB
Hey Firewall Admin–please open up the following ports for me. 🙂 Port Protocol Application protocol System service name n/a GRE GRE (IP protocol 47) Routing and Remote Access n/a ESP IPsec ESP (IP protocol 50) Routing and Remote Access n/a AH IPsec AH (IP protocol 51) Routing and Remote Access 7 TCP Echo Simple TCP/IP
While it is rare in Windows 2003 and above to see any TCP stack corruption it does occure every once in a while? Did you notcie that you can not uninstall the TCP services via the GUI as it is now considered a “core component” of the OS. You can still unisntall this via the
Issue this command to reset GPO settings to their defaults (enter thisas one line): secedit /configure /db reset /cfg “c:windowssecuritytemplatessetup security.inf” /overwrite Delete the registry.pol file if it exists (enter this as one line): del c:windowssystem32grouppolicymachineregistry.pol Reboot the server
Have you ever needed to change or add permissions to a large number of files and/or folder? Well you can use the powerful Subinacl to modify file and directory permissions. The utility is part of the Microsoft Windows Server Resource Kit For example if I need to grant access to my account for a bunch