QC ARS Synch PROD to LAB behind FW

Question

Hi, 
 
 I need to synch AD information (Users) between PROD domain and LAB domain using QC and ARS as I have Extended Attributes to synch. I have specified a static port for the "Aelita Enterprise Administration Service" and have added TCP port 135 and the new static port to the FW. I am able to create a QC Connection if I specify the connection to "Administration Service on specified computer" but if I use "Any Administration Service of the same configuration" it fails. 
 
 Using the first option doesn't show me any of the OUs in the scope settings. 
 
 I found an older post asking the same question but the wiki page the answer points to is no longer available. 
 
 ARS version is 6.9 and QC is 5.4 
 
 Are there any additional ports I need to get opened? 
 
 Thanks, 
 Justin

Terrance.Crombie · Accepted Answer

Hello Justin, Communication ports are documented here: Title: Communication Ports for Active Roles Service and Clients Solution Number: 30256 URL: support.software.dell.com/.../30256 ActiveRoles Server 6.9 client communication leverages DCOM. From that article: ActiveRoles Administration Service from versions prior to Active Roles 7.0 uses Distributed COM (DCOM) over two separate TCP ports to accept client connections and requests. Port 135 is used by Administration Service clients to locate the Administration Service. The second TCP connection has its port number automatically assigned by the RPC endpoint mapper. By default, any available port in the 1024-65535 range will be used. All requests from Administration Service clients, such as the MMC Console or ADSI Provider, are sent over this port. Note that the port range can be restricted or set to a static port through the Component Services snap-in (part of the Windows administration tools).