After promoting to 2019 DC i see Warnings with eventid 16969:
6 remote calls to the SAM database have been denied in the past 900 seconds throttling window.
Is this something i should be worry about? Should i add "Domain Users" and "Domain Computers"?
There is a new registry setting on 2019 DC: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\RestrictRemoteS = O:BAG:BAD:(A;;RC;;;BA) that is not controlled by GPO.