Windows Active Directory (AD)

Port 389 and 3289 need to be opened.

Do check firewall outbound rule, spent more than a week to configure a remote office to join domain.
Endup discovered that remote office firewal blocked outgoing traffic for those ports!