How should the Windows Firewall be configured for Server 2012R2 domain controllers?

Hi all,

We are in the process of planning the replacement of 2 x Server 2008 Domain Controllers with 2012r2 machines.

Currently the Windows firewall is not running on the 2008 servers but we want to utilise it on the 2012r2 machines.

I am trying to find  definitive guide about how the firewall should be set up on a DC but have not had much luck.  Will all the required exceptions be automatically configured on the Firewall when I install the AD Domain Services role and promote the server to a DC?