Re: Basic question about remote registry on Windows

[Bob Jones <lists () pavlodarproductions com>]

Ansgar -59cobalt- Wiechers wrote:
> On 2006-12-28 Thomas D. wrote:
> > Mary asked on Wednesday, December 27, 2006 1:50 AM:
> > > Can anyone tell me which port is the one that windows platform uses
> > > for remote registry connection?
> > It should be 'microsoft-ds' (NetBios, 445).
>
> 445/tcp is DirectSMB, not NetBIOS.
>
> Regards
> Ansgar Wiechers

In linux:
# cat /etc/services | grep 445 | grep microsoft
microsoft-ds    445/tcp
microsoft-ds    445/udp

# cat /etc/services | grep netbios
netbios-ns      137/tcp                    # NETBIOS Name Service
netbios-ns      137/udp
netbios-dgm     138/tcp                    # NETBIOS Datagram Service
netbios-dgm     138/udp
netbios-ssn     139/tcp                    # NETBIOS session service
netbios-ssn     139/udp


So, I suspect he got his info from a *NIX /etc/services file which in 
turn is a scaled down version of 
http://www.iana.org/assignments/port-numbers
which is the master list of port assignments.

As an experiment, I used an XPProSP2 box with firewall set to allow 
nothing and tried to connect to its registry from a 2003 server on the 
same network.  Fiddling with the 'file and print sharing' I found I 
could connect to the registry remotely with *only* port 445/tcp open.


Bob Jones