Separate GPO might be your best workaround. 

-----Original Message-----
From: [EMAIL PROTECTED]
[mailto:[EMAIL PROTECTED] On Behalf Of Hunter, Laura E.
Sent: Tuesday, March 01, 2005 11:21 AM
To: ActiveDir@mail.activedir.org
Subject: RE: [ActiveDir] Group Policy weirdness (or maybe 2K/2K3 interop w
eirdness)

> What version is your 2K DC up to?  Is it SP4?

SP4, yes indeed.

> 
> That aside, I would expect a setting of 1 to prevent enumeration per
> http://support.microsoft.com/kb/246261

I've never had any luck with a setting of 1. "2" has been the only setting
that has prevented enumeration on any 2K network I've ever seen.
(Though as you mention, there might be another setting that I haven't
tweaked that I need to.)

> 
> Upgrading would not be a bad idea if that's possible.
> 

Yeah, I'm working on it, I was just looking for a fix in the meantime.
:-)

Laura


List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/
List info   : http://www.activedir.org/List.aspx
List FAQ    : http://www.activedir.org/ListFAQ.aspx
List archive: http://www.mail-archive.com/activedir%40mail.activedir.org/

Reply via email to