Ports list for Windows Server to log on to the domain through firewall

[AnishR]

Open the following ports for incoming traffic which will enable Windows Server 2000 and 2003 to log on to the domain through the firewall:
53 - Domain Name System (DNS) for (TCP and UDP).
88 - Kerberos authentication for (TCP and UDP).
123 - Windows Time Synchronization Protocol (NTP). This is not required for Windows 2000 logon capability for (UDP).
135 - EndPointMapper for (TCP).
389 - Lightweight Directory Access Protocol (LDAP) for (TCP and UDP).
445 - Server message block (SMB) for Netlogon, LDAP conversion, and Microsoft Distributed File System (DFS) discovery for (TCP).
3268 - LDAP to global catalog servers for (TCP).

[AnishR]

Apart from the above mentioned ports, there were ports from 1024 to 5000 opened between the Member and Domain server. The End Point Mapper in return communicate with the member server with a random port number from 1024 to 5000.
If these ports are not open than the authentication will fail.