Potential risks of using unsecure RPC (No Authentication Required setting) in MSDTC security configuration

When your MSDTC machine is accessible from an un-authenticated client, i.e. machine outside your domain/firewall. Then when such a machine tries to talk to this MSDTC server, the MSDTC server will accept such requests, so in all it could allow requests from a machine outside the domain(as long as it can reach the MSDTC server/ports)…

1