asked on

anonymous bind in AD with server 2008

I have a Cisco device that only supports anonymous bind and I would like to enable it to test it with Server 2008 Active Directory. However, the article that I found:

http://technet.microsoft.com/en-us/library/cc816788%28WS.10%29.aspx

talks about a "dsHeuristics" entry in there which I don't have. Does anyone have another way to enable anonymous bind on Server 2008?

KenMcF

Try these steps here and read about the secuity concerns, this is for 2003 but will work on 2008 the same way

http://www.petri.co.il/anonymous_ldap_operations_in_windows_2003_ad.htm

willlandymore

ASKER

that mentions the same thing with the dsHeuristics entry...which is not even in my list.

KenMcF

Are you sure you are going to the properties of

CN=Directory Service,CN=Windows NT,CN=Services,CN=Configuration,DC=Domain,DC=Local

Make sure when you are in ADSIEDIT you connect to the configuration container.
Right click the top level and connect to from drop down list of well know naming context select configuration

willlandymore

ASKER

yeah, I'm in there.

I looked at our test domain controller and I see that the entry is there but not in our production one....

willlandymore

ASKER

I can find the value on the secondary DCs, but the Primary one is missing that

ASKER CERTIFIED SOLUTION

KenMcF

membership

This solution is only available to members.

To access this solution, you must be a member of Experts Exchange.

Start Free Trial

willlandymore

ASKER

I logged in with another account and now it's visible. Hmm....thought I was as high as you could go.

Thanks.