ANONYMOUS LOGON on w2k3

[Guest gs]

must ANONYMOUS LOGON be allowed on w2k3 servers with DC?

 

if so , what is the purpose and what is the best practise to minimize

security risks?

[Guest vyaw2003@gmail.com]

Re: ANONYMOUS LOGON on w2k3

 

If it comes down to $$ can you use a virtual machine instead?

Very unsecure, but anything is possible. Do you have some developers

with some dodgy code?

[Guest gs]

Re: ANONYMOUS LOGON on w2k3

 

no dodgy codes, but the consultants the boss hired told they need anonymous

logon to sync the two dc and smooth logon for domain pc.

 

 

I was skeptical. the consultant were entrusted by my boss to setup 2 w2k3

server to replace an old w2k3 system. the old server was the Domain

controller and file server.

the new server

A was to be the new DC and AD with file server

B was to be the exchange server and another DC and AD just in case A

fails ( of course there is no such thing as primary nor 2ndary DC)

 

I think the consultant did some manual setting to point A to B for AD and

DC.

 

<vyaw2003@gmail.com> wrote in message

news:1186118526.038928.23760@z24g2000prh.googlegroups.com...

> If it comes down to $$ can you use a virtual machine instead?

> Very unsecure, but anything is possible. Do you have some developers

> with some dodgy code?

>