We are implementing an update to Group Policy that affects our Windows Domain Controllers this morning at 10am. No impact is expected on end users, but we are mindful that a similar change last week caused an unexpected problem with LDAP-auth (see https://iris.eecs.berkeley.edu/news/resolved-incidents/eecs-ldap-logins-not-working/).
This update improves the security profile of our Domain Controllers. In particular, we are removing explicitly-listed Null Session Named Pipes, as is best practice.