LockoutStatus.exe - Ports used? RRS feed

  • Question

  • Hi,

    I would like to know what port/port range does the LockoutStatus.exe tool uses to retrieve Account Status information.

    From Netmon, it showed that it first opened a connection on port 135, then opened a connection on port 49667.

    Your feedback is highly appreciated on this matter.


    Thursday, March 12, 2020 10:26 AM

All replies

  • LockoutStatus is not a SysInternals tool it comes with the Windows Resource kit.

    For what I know, it sholud query the DNS to check what are the ActiveDirectory server for the domain, then it should query each Domain Controller to get the status of the user performing an LDAP query, so it should use 389/636 TCP and 53 for DNS.

    The best you can do is a network trace with Netmon or Wiresharq...


    Thursday, March 12, 2020 12:34 PM