# who is using ansible for windows

**URL:** <https://forum.ansible.com/t/who-is-using-ansible-for-windows/34150>\
**Category:** Ansible Project\
**Tags:** windows\
**Created:** [November 3, 2020, 8:08pm UTC](https://forum.ansible.com/t/who-is-using-ansible-for-windows/34150 "2020-11-03T20:08:04Z")\
**Posts on this page:** 6\
**Page:** 1

<div class="post-metadata">

**Author:** ![John\_Veliss](https://avatars.discourse-cdn.com/v4/letter/j/8e8cbc/32.png) [@John\_Veliss](https://forum.ansible.com/u/John_Veliss)\
**Post date:** [November 3, 2020, 8:08pm UTC](https://forum.ansible.com/t/who-is-using-ansible-for-windows/34150/1 "2020-11-03T20:08:04Z")

</div>

are you using ansible to manage domain joined Windows servers?  
If so, what authentication protocol are you using, kerberos or ntlm?

---

<div class="post-metadata">

**Author:** ![Adam\_Moore](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/adam_moore/32/3330_2.png) [@Adam\_Moore](https://forum.ansible.com/u/Adam_Moore)\
**Post date:** [November 3, 2020, 8:13pm UTC](https://forum.ansible.com/t/who-is-using-ansible-for-windows/34150/2 "2020-11-03T20:13:23Z")

</div>

ntlm is a bad thing, kerberos across several forests, also windows behind Linux jump hosts we use SOCKS5/psrp to connect.

---

<div class="post-metadata">

**Author:** ![John\_Veliss](https://avatars.discourse-cdn.com/v4/letter/j/8e8cbc/32.png) [@John\_Veliss](https://forum.ansible.com/u/John_Veliss)\
**Post date:** [November 3, 2020, 9:09pm UTC](https://forum.ansible.com/t/who-is-using-ansible-for-windows/34150/3 "2020-11-03T21:09:14Z")

</div>

Does your ansible server need to auth to the domain controllers to run plays on MS member servers if using kerberos?

---

<div class="post-metadata">

**Author:** ![Adam\_Moore](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/adam_moore/32/3330_2.png) [@Adam\_Moore](https://forum.ansible.com/u/Adam_Moore)\
**Post date:** [November 3, 2020, 9:15pm UTC](https://forum.ansible.com/t/who-is-using-ansible-for-windows/34150/4 "2020-11-03T21:15:38Z")

</div>

Yes, ansible has to do a kinit first against the DC before the play can execute.

---

<div class="post-metadata">

**Author:** ![John\_Veliss](https://avatars.discourse-cdn.com/v4/letter/j/8e8cbc/32.png) [@John\_Veliss](https://forum.ansible.com/u/John_Veliss)\
**Post date:** [November 3, 2020, 10:43pm UTC](https://forum.ansible.com/t/who-is-using-ansible-for-windows/34150/5 "2020-11-03T22:43:24Z")

</div>

Do you know if its just port 88 that needs to be open on the FW

---

<div class="post-metadata">

**Author:** ![Adam\_Moore](https://sea1.discourse-cdn.com/ansible/user_avatar/forum.ansible.com/adam_moore/32/3330_2.png) [@Adam\_Moore](https://forum.ansible.com/u/Adam_Moore)\
**Post date:** [November 3, 2020, 11:05pm UTC](https://forum.ansible.com/t/who-is-using-ansible-for-windows/34150/6 "2020-11-03T23:05:27Z")

</div>

at least 88 tcp/udp, you may need 53 tcp/udp for DNS also