Access Based Enumeration on Domain Controllers ?

Hi. I have read through the documentation for ABE and was wondering if
anyone knew of any reasons to avoid using it on Domain Controllers ? I
can't find any docunmentation which suggests this is not recommended but
just thought I'd check before testing further. Is it advisable not to
enable it on DC shares such as the SYSVOL and NETLOGON or should this not be
an issue ?

Thanks.

I have never noticed any warning/precautions mentioned.
Also, the shares you specifically call out should be ACLed
so that valid accesses would be allowed/seen anyway.


"Stuart" <(E-Mail Removed)> wrote in message
news:%(E-Mail Removed)...
> Hi. I have read through the documentation for ABE and was wondering if
> anyone knew of any reasons to avoid using it on Domain Controllers ? I
> can't find any docunmentation which suggests this is not recommended but
> just thought I'd check before testing further. Is it advisable not to
> enable it on DC shares such as the SYSVOL and NETLOGON or should this not
> be an issue ?
>
> Thanks.