The following table describes network ports that must be opened to ensure proper communication of the Veeam backup server with the Microsoft Active Directory VM during application-item restore.
Veeam backup server/standalone console
Microsoft Active Directory VM guest OS
Port required for communication between the domain controller and Veeam backup server.
636, 3268, 3269
1025 to 5000 (for Microsoft Windows 2003)
49152-65535 (for Microsoft Windows 2008 and newer)
Dynamic RPC port range used by the runtime coordination process deployed inside the VM guest OS for application-aware image processing (when working over the network, not over VIX API).