TCP 9389

ProtocolTCP
Port9389
Labelsadws Microsoft AD DS Web Services

Synopsis

  • TCP port 9389 is used by Microsoft Active Directory Web Services (ADWS).
  • It runs on Windows Server domain controllers (Windows Server 2008 R2 and later) and on Active Directory Lightweight Directory Services (AD LDS) instances.
  • The Active Directory Administrative Center (dsac.exe) and the Windows PowerShell ActiveDirectory module connect to domain controllers via ADWS on port 9389 for directory management and queries.
  • The “Active Directory Management Gateway Service” add-on for older domain controllers (Windows Server 2003/2008) also exposes ADWS on 9389 so newer RSAT tools can work with them.
  • In real deployments, enterprise admin workstations using RSAT connect over TCP 9389 to manage users, groups, and policies through ADWS on domain controllers.

Observed activity

Last 30 days Detailed chart

More information