Forum Discussion
Azure ATP SAM-R
Keep in mind that unlinking the GPO does not remove it's associated registry setting defined in https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-access-restrict-clients-allowed-to-make-remote-sam-calls#policy-and-registry-names and you have to remove it yourself using group policy preferences or other means (script?).
In regards to the documentation around that requirement, we will take your feedback under advisement.
Hi,
In the documentation it says the fix is to unlink the GPO.
When the GPO is unlinked, the default settings should apply.
https://support.microsoft.com/en-us/help/4055652/access-checks-fail-because-of-authz-access-denied-error-in-windows-ser
Method 2: Disable the policy
Clear the RestrictRemoteSAM registry entry or remove the policy.
The documentation states "or", not "and"
If that is applied to thousands of computers, manually removal it's not an option....