There is information disclosure issues. Just enabling anonymous access
is the tip of what you have to do, you have to change ACLs or group
memberships to allow actual access to data. Once you do that you have
opened up the info your directory not only to the anonymous processes
you know about but all anonymous processes.
There is a reason that stuff is off by default...
--
Joe Richards Microsoft MVP Windows Server Directory Services
Author of O'Reilly Active Directory Third Edition
www.joeware.net
---O'Reilly Active Directory Third Edition now available---
http://www.joeware.net/win/ad3e.htm