I'm trying to use VSS to quiesce a machine that's sitting behind a filtering router and am having difficulty determining what ports to open. Per the documentation, I've opened TCP 135, UDP 137 and 138, TCP 139 and TCP 445, but it's not working. It's gotta be because the MS RPC service (TCP 135) then allocates a random port for further communications, right? So, I just wanted to confirm that I have to also open TCP 1024-65535 in order to get this to work (and don't get me started about why MS designed this this way... ). Am I correct?