I have been upgrading our Domain Controller to Windows 2016. I have been informed from our security department that the RPC authentication ports are configured on our various firewalls. They would like me to limit these ports on the domain controllers, and I want to make sure that I am looking at the correct Registry Keys before making these changes.
I believe that the Key that I need to create (or edit) is:
HKLM\System\CurentControlSet\Services\NTDS\Parameters (adding DWORD called TCP/IP Port)
HKLM\System\CurrentControlSet\Services\Netlogon\Parameters (adding DWORD called DCTcpipPort)
Is this the correct keys? If so, do I need an entry for each port, or can I use a Multi_SZ and list all the ports