Paul Bergson
Guest
|
 Posted:
Fri Nov 11, 2005 5:50 pm Post subject:
Re: How to Prevent Anonymous LDAP Operations in Windows 2000 |
|
|
The key point here is 2000 allows this, 2003 only allows access to the
rootdse anything else requires you to bind to it. I'm unclear if there is a
way to block anonymous ldap queries but below is a routine that explains how
to allow access in. Maybe you can work backwards from it (I wouldn't try
this in production). My suggestion would be if you need the security
upgrade to 2003.
http://support.microsoft.com/default.aspx?scid=kb;en-us;320528
--
Paul Bergson MCT, MCSE, MCSA, CNE, CNA, CCA
This posting is provided "AS IS" with no warranties, and confers no rights.
"TC" <TC@discussions.microsoft.com> wrote in message
news:440C2D0C-1292-4BF2-ABAC-EB7ACF5B320C@microsoft.com...
| Quote: | Windows 2000 domain by default allows anonymous LDAP queries. How can an
administrator restrict this without affecting operations? Thanks. |
|
|
FAQ
Memberlist
Register
Profile
Log in to check your private messages
Log in