DS Ports 6.9

We have a wirelss vlan that is for public / guests to be able to connect to that is just port 80 for Internet access.

I want to know what ports we would have to open to be able to see these PCs from our internal network so they can be managed from the DS.

Reason is that some users accidentally get connected to the public wireless then they can't get email file srvr access etc.  Want to be able to push a script to them that will put them back on the right network.