connections from a domain controller to the SPS on port 135, 137, 3389

What could be the reason why I see connections from a domain controller to the SPS on port 135, 137, 3389? These are blocked. The question is if these are needed.

The SPS are joined to the AD.