Language:
It is possible to customize Active Directory behavior by adjusting fundamental attributes, but some of these modifications can potentially compromise security.
Remediate the security-sensitive fields of an Active Directory attribute dSHeuristics.
dSHeuristics attribute reference
Disabling the fLDAPBlockAnonOps field
Changing the value of dwAdminSDExMask
Enabling the fAllowPasswordOperationsOverNonSecureConnection field (AD LDS only)