MicrosoftMicrosoftI have a perhaps simplistic question. What I'm curious about are networks which have unsupported OS DCs - 2008/2008 R2 - and client workstations that are either Windows 7 with Extended Support agreements, or newer supported OSs - primarily of course builds of Windows 10. I'm unclear on how this will affect that type of network, any actual LDAP specific application or other device aside, so solely the Active Directory server and workstation relationships with typical file sharing, DNS, DHCP and so forth as part of a Windows network environment. So later in the year when the update is ultimately released which enforces the LDAP channel binding and signing, and workstations on the network receive this update by being supported and then having it enforced on them, will they be negatively impacted in their ability to communicate to the older DCs which will not be eligible to receive the same update? Will those older DCs have to essentially have the GPO/registry change manually set for them so they can continue to communicate? This entire conversation is targeted towards prepping ahead for this change and trying to understand its impact, so in a perfect world there wouldn't be a mismatch scenario like this, but I'd still be interested to see whether this scenario would result in issues to be expected or not? Realistically unsupported OSs or not, this scenario would also be what could happen in an environment when patching occurs effectively nightly on workstations, but on a slower weekly/monthly/etc cadence on servers (again where no preparation ahead was made as suggested to mitigate for this).
