Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

What port(s) should I open/NAT to allow me to use Remote Desktop?

share|improve this question
up vote 32 down vote accepted

Remote Desktop requires TCP port 3389 to be open.

It is possible to change the port used by the terminal server (or PC which is accessed), see this Microsoft support article: "How to change the listening port for Remote Desktop"

share|improve this answer
You can also have a different port if you use port forwarding. The private port is 3389 as said above unless you change it, and the public port can be whatever. I have mine set to 10000, so when I connect using Remote Desktop Connection, I have to enter – Joseph May 25 '09 at 18:47

The only exception to the previous answer (3389) is when using Small Business Server through Remote Web Workplace.

In this case the server NAT's the connection between you and server port 80 (HTTP) or 443 (HTTPS), and then to the internal computer; so only 80/443 is required.

share|improve this answer

If you don't want to use 3389 externally, open a different port externally, but point it to 3389 on the IP address of the machine you want RDC on. This is helpful for routing many systems with RDC. It's also nice because it won't require any registry edits.

share|improve this answer

In addition to opening port 3389 for UDP and TCP, I had to go edit the windows firewall rule and set Edge traversal to allow. Like this:

enter image description here

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.