Pre-Windows 2000 Compatible Access Group
-
Hi
Our AD is very old, initially made in 90s. Over the years lots of cruft is around.
The Pre-Windows 2000 Compatible Access Group currently has
Anonymous Logon
Everyone
Exchange Domain Servers
listed as group members.
The Anon and Everyone members seem to be legacy stuff from a very long time ago.
I am almost certain i should add Authenticated Users here and remove the rest.
Thoughts? -
@momurda said in Pre-Windows 2000 Compatible Access Group:
Our AD is very old, initially made in 90s. Over the years lots of cruft is around.
Had to be SAM. AD was released in 2000.
-
@momurda said in Pre-Windows 2000 Compatible Access Group:
Anonymous Logon
Everyone
Exchange Domain Servers
listed as group members.
The Anon and Everyone members seem to be legacy stuff from a very long time ago.
I am almost certain i should add Authenticated Users here and remove the rest.That's one scary group. What is it used for? Can you potentially eliminate the group completely?
-
Far as i know this group still exists in all AD setups, i dont want to erase it.
-
@momurda said in Pre-Windows 2000 Compatible Access Group:
Far as i know this group still exists in all AD setups, i dont want to erase it.
Yes, the group still exists... and is a pain.
-
@dbeato Who is a member of this group at your org, just Authenticated USers?
-
@momurda said in Pre-Windows 2000 Compatible Access Group:
@dbeato Who is a member of this group at your org, just Authenticated USers?
Yes and Exchange Domain Servers