At the same time if you need to find which ports are used from pcs/server to well communicate to Domain controller here they are verbosely list that I found thanks to colleague's help.
Obviously this rules need to be enabled in bidirectional way.
| Domain Controller | 123/UDP | W32Time |
| Domain Controller | 135 TCP/UDP | RPC Endpoint Mapper |
| Domain Controller | 136 TCP/UDP | Netbios |
| Domain Controller | 137 TCP/UDP | Netbios Name Resolution |
| Domain Controller | 138 TCP/UDP | Netbios Datagram Service |
| Domain Controller | 139 TCP/UDP | Netbios Session Service |
| Domain Controller | 3268/TCP | LDAP GC |
| Domain Controller | 3269/TCP | LDAP GC SSL |
| Domain Controller | 389/TCP/UDP | LDAP |
| Domain Controller | 445 TCP/UDP | SMB |
| Domain Controller | 464/TCP/UDP | Kerberos password change |
| Domain Controller | 49152-65535/TCP/UDP | RPC for LSA, SAM, Netlogon, DFSR RPC, FRS RPC |
| Domain Controller | 53/TCP/UDP | DNS |
| DNS server | 53/TCP/UDP | DNS |
| Domain Controller | 636/TCP | LDAP SSL |
| Domain Controller | 88/TCP/UDP | Kerberos |
| Domain Controller | icmp reply | ping reply from DC |
| Domain Controller | icmp request | ping to DC |
| Domain Controller | TCP 1688 | MS KMS Licensing |
| Domain Controller | TCP 5722 | MS Knowledge base - file replication - RPC, DFSR, SYSVOL |
| Domain Controller | TCP 593 | Rpc over HTTPS |
| DHCP server | UDP 67 - 68 | DHCP relay |