Figure 1. Assign an LDAP Query Policy Assigning an LDAP query policy, even if it's just the default policy found in Windows Server 2003, can help protect your directory from denial of service attacks and control how applications can communicate with the directory.