RAS Enrollment Server

Source	Destination	Protocol	Ports	Description
RAS Enrollment Server	AD DS controllers	TCP TCP TCP,UDP UDP	389, 3268 636, 3269 88 53	LDAP LDAPS Kerberos DNS
	RAS Connection Broker	TCP UDP	20003 20003	Settings synchronization and performance counters. Deny Connection Request
	Certificate Authority (CA)	TCP TCP	135 dynamic range 49152 - 65535	DCOM/RPC ports