The required ports for Microsoft Services for Network File System are not kept open even though the components are selected in the Security Configuration Wizard in Windows Server 2003 R2

When you run the Security Configuration Wizard to lock down a computer that is running Microsoft Services for Network File System, the required ports are not kept open even though the components are selected in the wizard.

The port numbers that Microsoft Services for Network File System components use are stored in the registry. By default, these registry entries are set to zero. Microsoft Services for Network File System software interprets a zero to mean that the software uses the industry standard port numbers. However, the Security Configuration Wizard does not interpret the zero in this manner. Therefore, the required ports for Microsoft Service for Network File System are not kept open.

Warning Serious problems might occur if you modify the registry incorrectly by using Registry Editor or by using another method. These problems might require that you reinstall your operating system. Microsoft cannot guarantee that these problems can be solved. Modify the registry at your own risk.

To resolve this issue, set the port numbers in the registry according to the values in the Microsoft Services for Network File System Help file. Then, rerun the Security Configuration Wizard. To view the values in the Help file, follow these steps:

1. Click Start, click Programs, click Administrative Tools, and then click Microsoft Services for Network File System.
2. On the Help menu, click Help on Microsoft Services for NFS, and then click Microsoft Services for NFS troubleshooting.
3. Click I need to modify ports used by Microsoft Services for NFS.

Follow the steps in the Help document to set the port numbers in the registry.

By default, Microsoft Services for Network File System uses the following port numbers:

• Network Lock Manager (NLM) protocol: port 1047
• Network Status Manager (NSM) protocol: port 1039
• Mount protocol: port 1048
• Network File System (NFS) protocol: port 2049

Note You do not have to modify the User Name Mapping base port number.