ports required between client and domain controller

Between client and domain controller (is always initiated from client side):

• Kerberos - 88 TCP/UDP
• RPC mapper - 135 TCP
• NetBIOS - nothing - it is not required since 2000!
• SMB/NetBT - 445 TCP/UDP
• Kerberos Password Change - 464 TCP/UDP
• LDAP - 389 TCP/UDP
• LDAP SSL - 636 TCP
• LDAP GC - 3268 TCP
• LDAP SSL GC - 3269 TCP
• DNS - 53 TCP/UDP
• RPC ports - 49152-65535 since Vista/2008, for older clients (legacy? I hate this word) 1025-5000
• (optional) DHCP - 67 DHCP