2.1 Transport

This protocol SHOULD<3> use the following RPC protocol sequences as specified in [MS-RPCE] section 2.1:

  • RPC over TCP/IP

  • RPC over named pipes

This protocol uses RPC dynamic endpoints for RPC over TCP/IP, as specified in [C706] section 4.

This protocol uses the following well-known endpoint. This endpoint is a named pipe for RPC over SMB:

  • \PIPE\NETLOGON

This protocol uses the mailslot datagram delivery service ([MS-MAIL] and [MS-SMB]). Mailslot messages (see [MS-MAIL] section 2.2.1) are sent to the following mailslot:

  • \MAILSLOT\NET\NETLOGON. This named mailslot is used in Netlogon replication, as defined in section 3.6.

This protocol MUST use the universally unique identifier (UUID) 12345678-1234-ABCD-EF00-01234567CFFB. The RPC version number is 1.0.

This protocol uses the Netlogon SSP. The server MUST use the RPC security provider extensions ([MS-RPCE] section 2.2.1.1.7). It SHOULD<4> register the Netlogon security package as specified in section 3.3.