ظهرت عندى مشكلة فى الدومين بعنوان EventID 2886 ياترا اية سببها؟؟؟؟

**nicolass** · 06-03-2012, 11:34

السلام عليكم ورحمه الله وبركاته
ظهرت فى الدومين عندى مشكلة بعنوان EventID 2886
وتفاصيلها
Some clients may currently be relying on unsigned SASL binds or LDAP simple binds over a non-SSL/TLS connection, and will stop working if this configuration change is made. To assist in identifying these clients, if such binds occur this directory server will log a summary event once every 24 hours indicating how many such binds occurred. You are encouraged to configure those clients to not use such binds. Once no such events are observed for an extended period, it is recommended that you configure the server to reject such binds.

For more details and information on how to make this configuration change to the server, please see https://go.microsoft.com/fwlink/?LinkID=87923.

You can enable additional logging to log an event each time a client makes such a bind, including information on which client made the bind. To do so, please raise the setting for the "LDAP Interface Events" event logging category to level 2 or higher.

أريد ان افهم سبب المشكلة وازاى يتم حلها والمشكلة اننا تتكرر كل فترة ولا اعلم سببها
وطبعا بتكون الشبكة عندى مش عارف ادخلها من الnetwork بس من run لما بكتب اسم الجهاز بيفتح عادى

**بسمك اللهم** · 07-03-2012, 13:16

الحل يكمن في هذه الخطوات قم بتطبيقها على كروب بولسي وستنتهي المشكله ان شاء الله
To use Group Policy to configure all domain controllers to reject unsigned and simple LDAP bind requests:
Open the Group Policy Management Console. To open the Group Policy Management Console, click Start. In Start Search, type Group Policy Management. Right-click the Group Policy Management icon on the Start menu, and then click Run as administrator.
Expand the forest and domain objects until you locate the domain object for the set of domain controllers that you want to configure.
Expand the Domain Controllers object, right-click Default Domain Controllers Policy, and then click Edit.
Expand the following objects in the Group Policy Management Editor: Computer Configuration, Policies, Windows Settings, Security Settings, and Local Policies, and then click Security Options.
In the right pane, double-click the Domain Controller: LDAP server signing requirements policy.
Ensure that the Define this policy setting check box is selected, use the selection box to set Require Signing, and then click OK.
Review the information in the Confirm Setting Change dialog box,and if you are sure you want to make this change, click Yes to continue.