what is the current state of Active Directory mixed-mode?

[David Lang <david.lang () digitalinsight com>]

the last time I looked at Win2K Active Directory word was that when run in
mixed mode it exposed lots of sensitive stuff via LDAP and that it took a
reinstall on the server to switch from mixed mode to native mode.

is this still the case? if so can someone please point me at some links
that show why mixed mode is a security nightmare? (even though the install
on w2k tells you it isn't secure I am in the position of having to proove
it as well, sigh...)

I've spent the last couple hours going through google searches and have
found some hints that it may now be possible to switch from mixed mode to
native mode, but nothing definante yet, and while I've found lots of stuff
talking about the programming interface to access Active Directory via
LDAP in mixed mode I haven't been able to find a single security paper on
it, just lots of examples of how people are useing it :-(

David Lang
_______________________________________________
firewall-wizards mailing list
firewall-wizards () honor icsalabs com
http://honor.icsalabs.com/mailman/listinfo/firewall-wizards