Separate GPO might be your best workaround. -----Original Message----- From: [EMAIL PROTECTED] [mailto:[EMAIL PROTECTED] On Behalf Of Hunter, Laura E. Sent: Tuesday, March 01, 2005 11:21 AM To: ActiveDir@mail.activedir.org Subject: RE: [ActiveDir] Group Policy weirdness (or maybe 2K/2K3 interop w eirdness)
> What version is your 2K DC up to? Is it SP4? SP4, yes indeed. > > That aside, I would expect a setting of 1 to prevent enumeration per > http://support.microsoft.com/kb/246261 I've never had any luck with a setting of 1. "2" has been the only setting that has prevented enumeration on any 2K network I've ever seen. (Though as you mention, there might be another setting that I haven't tweaked that I need to.) > > Upgrading would not be a bad idea if that's possible. > Yeah, I'm working on it, I was just looking for a fix in the meantime. :-) Laura List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/ List info : http://www.activedir.org/List.aspx List FAQ : http://www.activedir.org/ListFAQ.aspx List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/