Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

When you connect to a server through an MMC console on a local computer (dsa.msc for example), what ports does the connection occur on?

Is there any kind of protection from a rogue station hijaking the connection?

share|improve this question
up vote 1 down vote accepted

If I use Computer Management and connect to another computer, it's using microsoft-ds, which is port 445. Since there's a lot of traffic in a Microsoft network traveling over 445, I'm pretty certain that they do good things to prevent it being "hijacked" - whatever you mean by that. Do you mean MiTM attacks?

In most AD domains, authentication is handled by Kerberos, so a "rogue station" doesn't have the tickets that your session has. If you don't know much about Kerberos in AD, you'll definitely want to read up on it.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.