A client's server (sbs 2008) is getting Event ID 2886 warning:
Log Name: Directory Service
Date: 1/11/2014 11:51:12 AM
Event ID: 2886
Task Category: LDAP Interface
User: ANONYMOUS LOGON
The security of this directory server can be significantly enhanced by configuring the server to reject SASL (Negotiate, Kerberos, NTLM, or Digest) LDAP binds that do not request signing (integrity verification) and LDAP simple binds that are performed on a cleartext (non-SSL/TLS-encrypted) connection. Even if no clients are using such binds, configuring the server to reject them will improve the security of this server.
Some clients may currently be relying on unsigned SASL binds or LDAP simple binds over a non-SSL/TLS connection, and will stop working if this configuration change is made. To assist in identifying these clients, if such binds occur this directory server will log a summary event once every 24 hours indicating how many such binds occurred. You are encouraged to configure those clients to not use such binds. Once no such events are observed for an extended period, it is recommended that you configure the server to reject such binds.
For more details and information on how to make this configuration change to the server, please see http://go.microsoft.com/fwlink/?LinkID=87923
This KB has a "Fix it" option http://support.microsoft.com/kb/935834
I'm wondering whether others have done this and if you have any experienced any issues with the fix. Also, is the fix recommended?