What ports would one need to allow to have a machine in, say, a DMZ be
brought into a DSFW (AD) domain?

--
Stevo