Firewall for Active Directory

Windows Server a partir do 2008

Server Port	Protocolo TCP/UDP	Service
123	UDP	W32Time (NTP)
135	TCP	RPC Endpoint Mapper
464	TCP/UDP	Kerberos password change
49152-65535	TCP	RPC for LSA, SAM, NetLogon, FRS, DFSR
389	TCP/UDP	LDAP
636	TCP	LDAP SSL
3268	TCP	LDAP GC
3269	TCP	LDAP GC SSL
53	TCP/UDP	DNS
88	TCP/UDP	Kerberos
445	TCP	SMB

Limitar portas RCP

Execute no CMD como administrador

reg add "HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters" /v "DCTcpipPort" /t REG_DWORD /d "00005001" /f
reg add "HKLM\SYSTEM\CurrentControlSet\Services\NTDS\Parameters" /v "TCP/IP Port" /t REG_DWORD /d "00005002" /f
reg add "HKLM\SYSTEM\CurrentControlSet\Services\NtFrs\Parameters" /v "RPC TCP/IP Port Assignment" /t REG_DWORD /d "00005003" /f

Repita em todos os controladores de domínio e reinicie o servidor