ANONYMOUS LOGON on w2k3

[gs]

must ANONYMOUS LOGON be allowed on w2k3 servers with DC?

if so , what is the purpose and what is the best practise to minimize
security risks?

 

[vyaw2003@gmail.com]

If it comes down to $$ can you use a virtual machine instead?
Very unsecure, but anything is possible. Do you have some developers
with some dodgy code?

 

[gs]

no dodgy codes, but the consultants the boss hired told they need anonymous
logon to sync the two dc and smooth logon for domain pc.


I was skeptical. the consultant were entrusted by my boss to setup 2 w2k3
server to replace an old w2k3 system. the old server was the Domain
controller and file server.
the new server
A was to be the new DC and AD with file server
B was to be the exchange server and another DC and AD just in case A
fails ( of course there is no such thing as primary nor 2ndary DC)

I think the consultant did some manual setting to point A to B for AD and
DC.

<vyaw2003@gmail.com> wrote in message
news:1186118526.038928.23760@z24g2000prh.googlegroups.com...
> If it comes down to $$ can you use a virtual machine instead?
> Very unsecure, but anything is possible. Do you have some developers
> with some dodgy code?
>