What ports does a domain controller need when working through the "world"?

Question

Active Directory

The question arose, what ports should be opened to the "world", so that users who are not in the network and could work could connect to the domain controller (AD)?

Answer 1

https://technet.microsoft.com/en-us/library/dd7727...

Answer 2

Expose a domain controller with a bare booty on the Internet? You clearly want to be fired.
Your case is the perfect textbook VPN case. Deploy a VPN server on the corporate network, move it to the DMZ, and distribute instructions for connecting and configuring to remote users.