Hi,
Today I deployed several GPOs through central AD (To all PCs that joined the domain),
Now domain admins were unable to manage the Exchange Server, the following command failed:
Get-User -RecipientTypeDetails 'User' -ResultSize 'Unlimited'
I suspect the cause was:
Network access: Do not allow anonymous enumeration of SAM accounts
And
Network access: Do not allow anonymous enumeration of SAM accounts and shares
Not sure about that.