Ports Used by Active Administrator (4295294)

Port requirements

These ports are required by the Active Administrator application:

Port 15600 TCP, outgoing and incoming, for communication between an AA Console and the AA Server and the AA Foundation Service; firewall exceptions are necessary on both Console and Server machines.

Port 15601, TCP outgoing, on any member server or workstation on which the Active Administrator Workstation Logon Auditing Agent (AAWLA Agent) is installed port 15601, TCP incoming, on the AA Server to receive information from the AAWLA Agent(s).

Note: The AFS Server is the computer on which the Active Administrator Server is installed and running the Active Administrator Foundation Service (AFS). The Console is the computer on which the Active Administrator Console is installed. The AFS Database Server is the computer on which the audit database resides.

• Remote Procedure Call (RPC) must be open between the AFS Server and the target.

When installing the audit agent on a member server instead of a domain controller, the following inbound firewall exceptions for Windows Management Instrumentation must be enabled:

 WMI-In

If you are using the Certificate Management feature, Remote Registry Service must be enabled on all Windows computers on which certificates are managed.

If you are using the Azure™ Active Directory® feature, TCP Ports 80 and 443 must be open on the Internet-facing firewall.

If you are using the Active Directory Health feature:

TCP Port 15602 must be open on the Active Administrator server for the Active Administrator Data Service (ADS).

TCP Port 15603 must be open on the computer running the Directory Analyzer agent.