Remote calls to the SAM RPC protocol are restricted to only local administrators

  • Article

The SAM RPC protocol is being restricted. This means that only members of the local Administrator group can make remote calls against methods in this protocol. Active Directory domain controller behavior is unaffected.

Mitigations

Ensure that the right users are set as administrators on the PC. The ACL used for the access check is configurable via group policy.