"Which firewall ports need to be allowed for communication between the RDS Session Host server and the RDS Licensing Server?

Thank you for your response, Quinnie!

Unfortunately, it is still not working. I have allowed Server C’s IP (source port: any) to Server A’s IP (destination ports: 135, 139, 445, and 49125–65535), but I’m still unable to successfully connect to the License Server. I temporarily allowed any source port to any destination port, and it worked.

This makes me think we may still be missing some required ports, that’s the only logical conclusion I can reach at this point.

Hi Abdul Raafay,

Has your issue been resolved? If it has, feel free to mark ACCEPT ANSWER so others can find it helpful too. If you're still stuck or need anything else, I'm here to help. Just let me know!

Have a good day!!

QQ

Hello,

Thank you for your question. To allow Server C to communicate with Server A (the RDS Licensing Server) across a firewall, you’ll need to ensure the following ports are open:

• TCP 135 – Used by Remote Procedure Call (RPC) endpoint mapping
• TCP 139 and 445 – Required for SMB and named pipe communication
• Dynamic RPC Ports (TCP 49152–65535) – Used by the RDS Licensing service for RPC communication

I recommend configuring the firewall to allow these ports from Server C to Server A. For tighter control, you can restrict the dynamic RPC port range on Server A by modifying the registry or using Group Policy, then allow only that narrowed range through the firewall.

If this resolves your issue, feel free to mark this answer as accepted so others can benefit too.

Thank you so much!!!

Best regards,

Quinnie Quoc.