Windows Active Directory Domain Controllers use the following ports:
| Description | Port Numbers | Protocol |
| LDAP | 389 | TCP + UDP |
| LDAP SSL | 636 | TCP |
| LDAP GC | 3268 | TCP |
| LDAP GC SSL | 3269 | TCP |
| Kerberos | 88 | TCP + UDP |
| DNS | 53 | TCP + UDP |
| SMB,CIFS,SMB2, DFSN, LSARPC, NbtSS, NetLogonR, SamR, SrvSvc | 445 | TCP + UDP |
| TCP Dynamic - User and Computer Authentication, Group Policy | 49152-65535 | TCP |
| Windows Time | 123 | UDP |
| RPC | 5722 | TCP |
| UDP Dynamic - Group Policy (DCOM, RPC, EPM) | 49152-65535 | UDP |
| Group Policy, Netlogon, NetBIOS Datagram Service | 138 | UDP |
| User and Computer Authentication - NetLogon, NetBIOS Name Resolution | 137 | UDP |
| User and Computer Authentication - NetBIOS Session Service, NetLogon | 139 | TCP |
| User and Computer Authentication, Kerberos change/set password | 464 | TCP + UDP |
