Merge pull request #5230 from MaratMussabekov/patch-78

added link to the article about potential harm to Exchange Servers
This commit is contained in:
Daniel Simpson 2019-10-21 12:16:06 -07:00 committed by GitHub
commit c9d9547f0d
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23

View File

@ -37,6 +37,9 @@ This means that if you have a mix of computers, such as member servers that run
This topic also covers related events, and how to enable audit mode before constraining the security principals that are allowed to remotely enumerate users and groups so that your environment remains secure without impacting application compatibility.
> [!NOTE]
> Implementation of this policy [could affect offline address book generation](https://support.microsoft.com/help/4055652/access-checks-fail-because-of-authz-access-denied-error-in-windows-ser) on servers running Microsoft Exchange 2016 or Microsoft Exchange 2013.
## Reference
The SAMRPC protocol makes it possible for a low privileged user to query a machine on a network for data.