Built-in Misconfigurations - Pre-Windows 2000 Compatible Access

This is the first part of a series in which we look into default insecure configurations in Active Directory. This part covers the Pre-Windows 2000 Compatible Access group. What is it? What are the risks? And what can we do about it?