Allow Anonymous LDAP Binding to an AD LDS Instance

Step by step:

1. Click Start, point to Administrative Tools, and then click ADSI Edit.
2. Connect and bind to the configuration directory partition of the AD LDS instance on which you want to allow anonymous LDAP binding. For more information, see Manage an AD LDS Instance Using ADSI Edit.
3. In the console tree, double-click the configuration directory partition (CN=Configuration,CN={GUID}), double-click the services container (CN=Services), double-click the Windows NT container (CN=Windows NT), right-click the directory service container (CN=Directory Service), and then click Properties.
4. In Attributes, click dsHeuristics, and then click Edit.
5. In Value, modify the value of the seventh character in the attribute (counting from the left) to 2, as follows:
   0000002001001
6. Click OK twice.

Link