Microsoft to Launch 'Enforcement Mode' for ...
This move will block vulnerable connections from noncompliant devices, according to a Microsoft Security and Response Center blog post. DC enforcement mode requires both Windows and non-Windows devices to use secure Remote Procedure Call (RPC) with a Netlogon secure channel, unless a business has allowed an account to be exposed by adding an exception for a noncompliant device. CVE-2020-1472 is a privilege escalation flaw in the Windows Netlogon Remote Protocol (MS-NRPC) with a CVSS score of ...
Infrastructure Security Agency Response Center Enforcement Mode Netlogon Domain Controller Domain Controller Microsoft Security
Source: darkreading.com