Quantcast
Channel: Directory Services forum
Viewing all articles
Browse latest Browse all 31638

SAM remote call on a 2019 DC

$
0
0

After promoting to 2019 DC i see Warnings with eventid 16969:

6 remote calls to the SAM database have been denied in the past 900 seconds throttling window.

Is this something i should be worry about? Should i add "Domain Users" and "Domain Computers"?

There is a new registry setting on 2019 DC: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\RestrictRemoteS = O:BAG:BAD:(A;;RC;;;BA) that is not controlled by GPO.

https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls



Viewing all articles
Browse latest Browse all 31638

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>