TCP 9389
Synopsis
- TCP port 9389 is used by Microsoft Active Directory Web Services (ADWS).
- It runs on Windows Server domain controllers (Windows Server 2008 R2 and later) and on Active Directory Lightweight Directory Services (AD LDS) instances.
- The Active Directory Administrative Center (dsac.exe) and the Windows PowerShell ActiveDirectory module connect to domain controllers via ADWS on port 9389 for directory management and queries.
- The “Active Directory Management Gateway Service” add-on for older domain controllers (Windows Server 2003/2008) also exposes ADWS on 9389 so newer RSAT tools can work with them.
- In real deployments, enterprise admin workstations using RSAT connect over TCP 9389 to manage users, groups, and policies through ADWS on domain controllers.
Observed activity
Last 30 days
Detailed chart