Forum Discussion

Copper Contributor

Mar 11, 2023

Exchange 2016 Event 2159 ADAccess Validation Failed

We intermittently see event id 2159 generated on our Exchange 2016 Server (CU23 Jan23SU). They seem to have appeared sometime in the past month. We tend to see about 50-150 events per day. We've e...

Exchange Server

jlando

Copper Contributor

Jun 30, 2023

DrShutt, ronenu and h1ckman - Any chance you guys are using (or in the process of rolling out) CS Identity Protection? DrShutt's comment about LDAP queries being changed has me wondering if CS Identity Protection isn't passing those queries through correctly.

h1ckman

Copper Contributor

Jun 30, 2023

We have had identity enabled on the DCs since we did a POC last October. Not really much to configure specific to identity except to allow it to monitor DC traffic or turn it off altogether. To have it actively block or do anything other than monitor you have to create rules which we have not done anything with yet.