I recently came across an “Access is denied” issue when I was trying to disable the SID filtering in Windows 2008 side. Anyway, this is what I did to resolve the issue:
I have enabled the “Network access: Allow anonymous SID/Name translation” GPO settings in “Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options”. I have performed this action only in my Windows 2008 Domain.
Also, please read the following articles and make sure you understand policy details before enabling it.
http://support.microsoft.com/kb/823659
http://technet.microsoft.com/en-us/library/cc728431.aspx
Read my new Blogs at: http://blogs.sivarajan.com
About Santhosh Sivarajan
Santhosh Sivarajan is a Technical Architect in Houston, TX. His main focuses are Microsoft Infrastructure and Security Technologies. He is MCTS, MCSE (W2K3/W2K/NT4), MCP+I, MCSA (W2K3/W2K/MSG) and CCNA certified. His expertise includes Active Directory, Exchange, Migrations, Microsoft Clustering, Microsoft Security, RMS, MOM, LCS, ISA Server, etc. If you wish to send an email, he can be reached at santhosh@sivarajan.com. Blogs: http://santhoshsivarajan.blogspot.com/