Installation Checklist: The Essential Firewall Guide for New QuickBooks Users

Configuring your firewall correctly during a new QuickBooks Desktop installation ensures workstations can connect to your company file without dropping connections or triggering multi-user network errors. When Windows Defender or third-party security software blocks the background database services, QuickBooks cannot negotiate file-sharing handshakes. This essential checklist covers the specific inbound and outbound ports, executable permissions, and network profiles required to establish stable communication between your hosting server and connected workstations from day one.

Fast-Fix: The 45-Second Solution

To configure your firewall for a new QuickBooks installation, open Windows Defender Firewall with Advanced Security, create an Inbound Port Rule for TCP port 8019 and your version’s dynamic database range (such as 55368–55372 for 2024–2025 or 55373–55377 for 2026), set the action to Allow the connection, and apply it to Domain and Private profiles. Then, create program exceptions for QBDBMgrN.exe, QBCFMonitorService.exe, and QBW32.exe.

Quick Status & Triage Snapshot

• Setup Scope: Server host machine and all client workstations on the local network.
• Primary Risk: Network isolation (workstations unable to see the server or open the shared company file).
• Network Impact: Blocks multi-user mode entirely if skipped; single-user local access remains unaffected.
• Estimated Setup Time: 10–15 minutes per host server; 5 minutes per workstation.

Pre-Installation Network Requirements

Before opening firewall ports, verify your local network environment meets these basic hosting requirements:

1. Private Network Profile: Ensure your Windows network connection is set to Private or Domain, never Public. Public networks automatically enforce strict firewall policies that block local peer discovery and file sharing.
2. Static IP or Reserved DHCP: Assign your hosting computer a static IP address or a DHCP reservation in your router. If the server’s IP changes after a router reboot, client workstations will lose their path to the database manager.
3. Dedicated Data Folder: Place your .QBW company files in a dedicated top-level directory (such as C:\QuickBooksData), not in system-protected folders like Desktop, Program Files, or Documents.

The QuickBooks Firewall Installation Checklist

Complete these four configuration stages on the hosting machine running the QuickBooks Database Server Manager.

Step 1: Open Required Network Ports

QuickBooks Desktop uses static ports for management coordination and dynamic port ranges for database transmission.

1. Press Windows Key + R, type wf.msc, and press Enter.
2. In the left sidebar, click Inbound Rules, then click New Rule… in the right Actions pane.
3. Select Port and click Next.
4. Select TCP and choose Specific local ports.
5. Enter the ports matching your QuickBooks Desktop version:
   • QuickBooks 2026: 8019, 55373-55377
   • QuickBooks 2025 / 2024: 8019, 55368-55372
   • QuickBooks 2023: 8019, 55363-55367
6. Click Next, choose Allow the connection, and click Next.
7. Check Domain and Private (leave Public unchecked for security), then click Next.
8. Name the rule (e.g., QuickBooks Ports [Year]) and click Finish.
9. Click Outbound Rules in the left pane, click New Rule…, and repeat steps 3 through 8 to allow identical outbound TCP traffic.

For a deeper look at assigning port rules for modern environments, read Firewall Ports: Configuring Windows Firewall for QuickBooks 2024–2026.

Step 2: Whitelist Core QuickBooks Executables

Dynamic port assignments can occasionally shift after server restarts. Creating executable-level firewall rules ensures background services maintain network access regardless of port changes.

Create inbound rules for each of the following executables located in your QuickBooks installation directory (typically C:\Program Files\Intuit\QuickBooks [Year] or C:\Program Files (x86)\Intuit\QuickBooks [Year] on older 32-bit systems):

• QBW32.exe / QBW.exe: Primary QuickBooks workstation program.
• QBDBMgrN.exe: Main Database Server Manager engine responsible for multi-user file hosting.
• QBDBMgr.exe: Secondary database utility service.
• QBCFMonitorService.exe: Company file monitoring daemon that detects active client connections.
• QBUpdate.exe: Automated updater for payroll tax tables and patches.

To create these rules:

1. In wf.msc, click Inbound Rules > New Rule….
2. Select Program and click Next.
3. Click Browse, select the executable, and click Open.
4. Choose Allow the connection, apply it to Domain and Private, name the rule, and save.

For comprehensive path locations and antivirus exclusion steps, review Windows Defender: How to Whitelist QuickBooks Executables (.exe).

Step 3: Verify SMB and File-Sharing Permissions

QuickBooks relies on standard Windows file-sharing protocols to access the raw file container before the database engine opens queries:

1. Right-click your company file folder (e.g., C:\QuickBooksData) and select Properties.
2. Switch to the Sharing tab and click Advanced Sharing.
3. Check Share this folder, then click Permissions.
4. Add the QBDataServiceUser[XX] account (where XX matches your version year) and grant it Full Control.
5. Grant active local users or domain user groups Full Control (Read/Write/Delete).
6. Switch to the Security tab and verify that identical permissions exist at the NTFS file system level.

To troubleshoot folder permission inheritance issues, refer to Multi-User Access: Verifying Folder Sharing & Network Permissions.

Step 4: Configure Third-Party Antivirus Suites

If your server or workstations run software such as Norton, McAfee, Bitdefender, or Sophos, their built-in packet filters will override Windows Defender:

1. Open your antivirus control console.
2. Locate the Firewall or Network Protection settings.
3. Add the QuickBooks data directory to the real-time scanning exclusion list to prevent active scans from locking the .qbw file.
4. Add TCP port 8019 and your version-specific database port range to the inbound allow list.

For program-specific instructions, consult Antivirus Setup: Adding QuickBooks Exceptions to Norton, McAfee & Bitdefender.

Verifying Network Connectivity

Before opening the software on workstations, run a rapid verification from a client computer:

1. Press Windows Key + R, type cmd, and press Enter.
2. Ping the server by name: ping [ServerName]. If it fails, ping the server by IP address: ping [ServerIP].
3. Open PowerShell and verify the database manager port responds:
   Test-NetConnection -ComputerName [ServerIP] -Port 8019
4. Confirm that TcpTestSucceeded returns True.

If the test returns False, check Port 8019 Fix: The Key to Solving Most QuickBooks Connection Issues to identify whether a secondary security suite or router rule is blocking the socket.

When Initial Setup Fails: Diagnostic Next Steps

If client workstations still display connection errors after you complete the checklist:

• Error H202 or H505: These codes indicate workstations cannot verify hosting status on the server. Follow QuickBooks Error H202: Troubleshooting Server Communication Failures to resolve host configuration mismatches.
• Server Scans Required: If ports are open but workstations cannot find the file, open the QuickBooks Database Server Manager on the host machine, select the Scan Folders tab, add your company data folder, and click Start Scan to regenerate the network descriptor (.ND) file.

Closing the Books

Taking a few minutes to open the correct ports, whitelist background services, and assign proper folder permissions during initial setup eliminates the vast majority of network errors before they disrupt your accounting workflow. With these rules in place, your server can securely host files for all authorized workstations across your local network.