How to configure Active Directory to allow anonymous queries (320528)
The information in this article applies to:
- Microsoft Windows 2000 Server SP1
- Microsoft Windows 2000 Server SP2
- Microsoft Windows 2000 Server SP3
This article was previously published under Q320528 SUMMARY Many environments require you to make anonymous queries to
Active Directory. For example, you may have to make anonymous queries to return
e-mail addresses. You can configure Active Directory to allow these
queries.
This article describes how to configure Active Directory to
support anonymous queries even though allowing anonymous queries can weaken the
security of Active Directory. Use caution when you apply permissions to Active
Directory because a misconfiguration may allow non-authenticated users to query
for secure information. As a general rule, only give the Anonymous Logon
account the permissions that are required to perform the anonymous query.
Modification Type: | Major | Last Reviewed: | 11/12/2004 |
---|
Keywords: | kbhowto KB320528 |
---|
|