I have problems with the DSA-Signature attribute being updated in the schema naming context (NC schema) when backing up the system state of a domain controller.
Windows clients running ADSI applications and scripts query these reference attributes to detect updates in the added schema. When they detect such updates, ADSI clients download an updated copy of the aggregated schema from a domain controller through an LDAP read.
This backup causes an excessive sending of packages and ends up taking all the upload bandwidth, I could not find a way to disable the backup of the state of the system of a domain controller.
I ran the tcpview and read a bit about LDAP, I could conclude that it is a backup that the DSA-Signature attribute
Process: Lsass.exe | PID: 844 | TCP | LocalAddress: SERVIDOR | Local Port: ldap | Remote Address: SERVIDOR | Remote Port: 0 | Stated: LISTENING | Sent Packets: 44.775 | Sent Bytes: 135.589.750 | Rcvd Packets: 45.007 | Rcvd Bytes: 2.297.315
