Revised Step 1 in Configuring Password Filters for All Domain Controllers from One Machine, concerning ports that must be available on the domain controller. Although you can use NetBIOS over TCP, you can also use WINS or DNS.