DCE-RPC Session Helper

Forum|Forum|5 months ago
February 22, 2026
2 replies
164 views

I have Windows domain environment, session helper is enabled. For normal active directory domain services it works fine. I also have CA server for auto enrollment, this does not work. I had to allow dynamic port range from clients to CA server for certificate auto enrolment. How can I enable this on Firewall to work over a single port?

FortiGate

AEK

SuperUser

You need to allow the DEC-RPC pre-defined service and the helper should do the rest.

Besides it should be possible to enable the Certificate Enrollment Web Service on your Windows AD so the clients will do it only via HTTPS 443.

https://learn.microsoft.com/en-us/windows-server/identity/ad-cs/certificate-enrollment-web-service

Hope it helps.

AEK

ataroAuthor

Explorer II

DCE-RPC Session Helper works fine for normal active directory traffic but does not work for TLS certificate request. I do not have web services on CA. So DCE-RPC Session Helper is specific to certain AD services? What about DCOM based applications, how do I make it work?

Sign up

Login with SSO

Login to the community

Login with SSO