Microsoft-DS traffic (445/tcp, 445/udp)
Kerberos authentication protocol (88/tcp, 88/udp)
Lightweight Directory Access Protocol (LDAP) ping (389/udp)
Domain Name System (DNS) (53/tcp, 53/udp)
Computer Login and Authentication
A computer logon to a domain controller uses the following:
Microsoft-DS traffic (445/tcp, 445/udp)
Kerberos authentication protocol (88/tcp, 88/udp)
LDAP ping (389/udp)
DNS (53/tcp, 53/udp)