{"id":56984,"date":"2024-03-04T10:00:00","date_gmt":"2024-03-04T10:00:00","guid":{"rendered":"https:\/\/infrasos.com\/?p=56984"},"modified":"2024-03-01T18:02:18","modified_gmt":"2024-03-01T18:02:18","slug":"securing-ldap-communications-in-active-directory","status":"publish","type":"post","link":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/","title":{"rendered":"Securing LDAP Communications in Active Directory"},"content":{"rendered":"\t\t<div data-elementor-type=\"wp-post\" data-elementor-id=\"56984\" class=\"elementor elementor-56984\">\n\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-28a8263 e-con-boxed e-con\" data-id=\"28a8263\" data-element_type=\"container\" data-settings=\"{&quot;content_width&quot;:&quot;boxed&quot;}\">\n\t\t\t\t\t<div class=\"e-con-inner\">\n\t\t\t\t<div class=\"elementor-element elementor-element-3e2c948 elementor-widget elementor-widget-heading\" data-id=\"3e2c948\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-heading-title{padding:0;margin:0;line-height:1}.elementor-widget-heading .elementor-heading-title[class*=elementor-size-]>a{color:inherit;font-size:inherit;line-height:inherit}.elementor-widget-heading .elementor-heading-title.elementor-size-small{font-size:15px}.elementor-widget-heading .elementor-heading-title.elementor-size-medium{font-size:19px}.elementor-widget-heading .elementor-heading-title.elementor-size-large{font-size:29px}.elementor-widget-heading .elementor-heading-title.elementor-size-xl{font-size:39px}.elementor-widget-heading .elementor-heading-title.elementor-size-xxl{font-size:59px}<\/style><h2 class=\"elementor-heading-title elementor-size-default\">What is LDAP?<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-b3fcf51 elementor-widget elementor-widget-text-editor\" data-id=\"b3fcf51\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-text-editor.elementor-drop-cap-view-stacked .elementor-drop-cap{background-color:#69727d;color:#fff}.elementor-widget-text-editor.elementor-drop-cap-view-framed .elementor-drop-cap{color:#69727d;border:3px solid;background-color:transparent}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap{margin-top:8px}.elementor-widget-text-editor:not(.elementor-drop-cap-view-default) .elementor-drop-cap-letter{width:1em;height:1em}.elementor-widget-text-editor .elementor-drop-cap{float:left;text-align:center;line-height:1;font-size:50px}.elementor-widget-text-editor .elementor-drop-cap-letter{display:inline-block}<\/style>\t\t\t\t<p>Securing LDAP Communications in Active Directory. Lightweight directory access protocol (LDAP) is an open protocol used to lookup information within a network. LDAP is often used to retrieve some piece of information from the directory server which is usually a certain kind of database. Directory servers, such as Active Directory Domain Services (AD DS), store the information about different network objects and their attributes. Then, this information is retrieved using the LDAP protocol. The protocol works the following way:<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c38ae90 elementor-widget elementor-widget-image\" data-id=\"c38ae90\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor - v3.12.2 - 23-04-2023 *\/\n.elementor-widget-image{text-align:center}.elementor-widget-image a{display:inline-block}.elementor-widget-image a img[src$=\".svg\"]{width:48px}.elementor-widget-image img{vertical-align:middle;display:inline-block}<\/style>\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/001.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Securing LDAP Communications in Active Directory\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTY5ODYsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAyXC8wMDEucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"295\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/001-768x295.png\" class=\"attachment-medium_large size-medium_large wp-image-56986\" alt=\"Securing LDAP Communications in Active Directory\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/001-768x295.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/001-300x115.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/001-720x276.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/001.png 936w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f891963 elementor-widget elementor-widget-text-editor\" data-id=\"f891963\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol><li>The client (usually referred as a directory user agent, or DUA) establishes connection with the LDAP server (directory system agent, or DSA).<\/li><li>DUA sends the request for the required information and provides user credentials, usually username and<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/password-reports\/\"> password<\/a>.(also see <a href=\"https:\/\/infrasos.com\/active-directory-password-reset-tool-self-service-portal\/\">password reset tool<\/a>).<\/li><li>DSA authenticates and authorizes.<\/li><li>If the authentication is successful, the server provides the requested information.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-3300e5f elementor-widget elementor-widget-image\" data-id=\"3300e5f\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/002.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"LDAP Authentication\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU2OTg3IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNFwvMDJcLzAwMi5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"147\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/002-768x147.png\" class=\"attachment-medium_large size-medium_large wp-image-56987\" alt=\"LDAP Authentication\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/002-768x147.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/002-300x57.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/002-720x138.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/002.png 953w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6f4c8c5 elementor-widget elementor-widget-text-editor\" data-id=\"6f4c8c5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-backup-strategies-and-tools\/\">Active Directory Backup Strategies and Tools (Best Practices)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-82308a5 elementor-widget elementor-widget-heading\" data-id=\"82308a5\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Securing LDAP in Active Directory<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-751b8f7 elementor-widget elementor-widget-text-editor\" data-id=\"751b8f7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Though LDAP is not used as a default authentication and authorization protocol in AD (<a href=\"https:\/\/infrasos.com\/what-is-event-id-4771-kerberos-pre-authentication-failed\/\">it uses Kerberos<\/a>). Many components of directory described in the LDAP specification, such as hierarchy, <a href=\"https:\/\/infrasos.com\/active-directory-forest-vs-domain-whats-the-difference\/\">attribute schema<\/a> and others, are used in AD. Most importantly, LDAP queries are used to interact with the directory and this communication must be well protected.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-08cce51 elementor-widget elementor-widget-heading\" data-id=\"08cce51\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Enabling LDAPS<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-e9cf1a7 elementor-widget elementor-widget-text-editor\" data-id=\"e9cf1a7\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>By default, LDAP traffic is not protected, and data is transferred as a plain text. The connections can be secured by encrypting the traffic using the Transport Layer Security (TLS) certificate, which prevents the <a href=\"https:\/\/infrasos.com\/phishing-attacks-via-microsoft-exchange-prevention-and-response\/\">man in the middle attacks<\/a>. This approach is the most common way of protection of LDAP traffic and considered as a best practice. Enabling LDAPS doesn\u2019t require any special config. You must place the appropriate TLS certificate to the local computer\u2019s personal store. More details- see <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows-hardware\/drivers\/install\/local-machine-and-current-user-certificate-stores\" target=\"_blank\" rel=\"noopener\">Local Machine and Current User Certificate Stores<\/a>) of each <a href=\"https:\/\/infrasos.com\/how-to-add-domain-controller-to-an-existing-domain\/\">domain controller<\/a>.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8e67fbd elementor-widget elementor-widget-text-editor\" data-id=\"8e67fbd\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-password-reset-tool-self-service-portal\/\">Prioritize your helpdesk efficiency with Active Directory Password Reset Tool \u2013 Self Service Portal<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-956a75b elementor-widget elementor-widget-heading\" data-id=\"956a75b\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Certificate Requirements<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aed1193 elementor-widget elementor-widget-text-editor\" data-id=\"aed1193\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ul><li>Must be trusted by both domain controllers and LDAP clients. Therefore, if all the clients are members of the domain, issue the certificate using the Active Directory Certificate Authority. And if there are external clients \u2013 the certificate should be issued by a trusted third-party certificate authority.<\/li><li>Must include the private key. So if you use one of the domain controllers to create a certificate signing request for a certificate. Then you plan to use the same certificate for other domain controllers, please ensure to mark private key as exportable.<\/li><li>Strong private key protection must be disabled. For more details about strong key protection see <a href=\"https:\/\/techcommunity.microsoft.com\/t5\/core-infrastructure-and-security\/what-is-a-strong-key-protection-in-windows\/ba-p\/1128527\" target=\"_blank\" rel=\"noopener\">What is a strong key protection in Windows?<\/a><\/li><li>The fully qualified domain name (FQDN) of the domain controller must be presented in either subject name or subject alternative name (SAN) of the certificate. For example, if you want to purchase a certificate used for LDAPS in 4 domain controllers, specify 1 FQDN in the subject name attribute and 3 others \u2013 in SAN.<\/li><li><strong>Enhanced Key Usage<\/strong> extension of the certificate must include the <strong>Server Authentication<\/strong> object identifier.<\/li><\/ul><p>The certificate enrolment and installation procedures are standard. Detailed instructions are found in <a href=\"https:\/\/learn.microsoft.com\/en-us\/previous-versions\/windows\/it-pro\/windows-server-2003\/cc782583(v=ws.10)\" target=\"_blank\" rel=\"noopener\">Advanced Certificate Enrollment and Management<\/a>). When the certificate is issued and installed to the local computer\u2019s personal store, the domain controller must be restarted. After the restart, the server starts accepting the LDAPS connections over TCP port 636, so you need to ensure that the port is accessible for connections.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5046b17 elementor-widget elementor-widget-template\" data-id=\"5046b17\" data-element_type=\"widget\" data-widget_type=\"template.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<div class=\"elementor-template\">\n\t\t\t\t\t<div data-elementor-type=\"section\" data-elementor-id=\"7917\" class=\"elementor elementor-7917\">\n\t\t\t\t\t\t\t\t<section class=\"elementor-section elementor-inner-section elementor-element elementor-element-30c8dcce ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default elementor-invisible\" data-id=\"30c8dcce\" data-element_type=\"section\" data-settings=\"{&quot;animation&quot;:&quot;bounceInRight&quot;,&quot;background_background&quot;:&quot;gradient&quot;}\">\n\t\t\t\t\t\t\t<div class=\"elementor-background-overlay\"><\/div>\n\t\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-default\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-19a106e2 ot-flex-column-vertical\" data-id=\"19a106e2\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-ca1a12e elementor-widget elementor-widget-heading\" data-id=\"ca1a12e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Try our Active Directory & Office 365 Reporting & Auditing Tools<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4c539a35 elementor-widget elementor-widget-text-editor\" data-id=\"4c539a35\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p style=\"text-align: center;\"><strong><span style=\"color: #ff6600;\">Try us out<\/span> for <span style=\"color: #ff0000;\">Free<\/span>.\u00a0 100&#8217;s of report templates available. Easily customise your own reports on AD, Azure AD &amp; Office 355.<\/strong><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-inner-column elementor-element elementor-element-16296eed ot-flex-column-vertical\" data-id=\"16296eed\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-65568df5 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"65568df5\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<style>\/*! elementor-pro - v3.10.3 - 29-01-2023 *\/\n.elementor-button.elementor-hidden,.elementor-hidden{display:none}.e-form__step{width:100%}.e-form__step:not(.elementor-hidden){display:flex;flex-wrap:wrap}.e-form__buttons{flex-wrap:wrap}.e-form__buttons,.e-form__buttons__wrapper{display:flex}.e-form__indicators{display:flex;justify-content:space-between;align-items:center;flex-wrap:nowrap;font-size:13px;margin-bottom:var(--e-form-steps-indicators-spacing)}.e-form__indicators__indicator{display:flex;flex-direction:column;align-items:center;justify-content:center;flex-basis:0;padding:0 var(--e-form-steps-divider-gap)}.e-form__indicators__indicator__progress{width:100%;position:relative;background-color:var(--e-form-steps-indicator-progress-background-color);border-radius:var(--e-form-steps-indicator-progress-border-radius);overflow:hidden}.e-form__indicators__indicator__progress__meter{width:var(--e-form-steps-indicator-progress-meter-width,0);height:var(--e-form-steps-indicator-progress-height);line-height:var(--e-form-steps-indicator-progress-height);padding-right:15px;border-radius:var(--e-form-steps-indicator-progress-border-radius);background-color:var(--e-form-steps-indicator-progress-color);color:var(--e-form-steps-indicator-progress-meter-color);text-align:right;transition:width .1s linear}.e-form__indicators__indicator:first-child{padding-left:0}.e-form__indicators__indicator:last-child{padding-right:0}.e-form__indicators__indicator--state-inactive{color:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-inactive [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-inactive-secondary-color,#fff)}.e-form__indicators__indicator--state-inactive object,.e-form__indicators__indicator--state-inactive svg{fill:var(--e-form-steps-indicator-inactive-primary-color,#c2cbd2)}.e-form__indicators__indicator--state-active{color:var(--e-form-steps-indicator-active-primary-color,#39b54a);border-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-active-secondary-color,#fff)}.e-form__indicators__indicator--state-active object,.e-form__indicators__indicator--state-active svg{fill:var(--e-form-steps-indicator-active-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed{color:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator--state-completed [class*=indicator--shape-]:not(.e-form__indicators__indicator--shape-none){background-color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator__label{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a)}.e-form__indicators__indicator--state-completed .e-form__indicators__indicator--shape-none{color:var(--e-form-steps-indicator-completed-primary-color,#39b54a);background-color:initial}.e-form__indicators__indicator--state-completed object,.e-form__indicators__indicator--state-completed svg{fill:var(--e-form-steps-indicator-completed-secondary-color,#fff)}.e-form__indicators__indicator__icon{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);font-size:var(--e-form-steps-indicator-icon-size);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;overflow:hidden;margin-bottom:10px}.e-form__indicators__indicator__icon img,.e-form__indicators__indicator__icon object,.e-form__indicators__indicator__icon svg{width:var(--e-form-steps-indicator-icon-size);height:auto}.e-form__indicators__indicator__icon .e-font-icon-svg{height:1em}.e-form__indicators__indicator__number{width:var(--e-form-steps-indicator-padding,30px);height:var(--e-form-steps-indicator-padding,30px);border-width:1px;border-style:solid;display:flex;justify-content:center;align-items:center;margin-bottom:10px}.e-form__indicators__indicator--shape-circle{border-radius:50%}.e-form__indicators__indicator--shape-square{border-radius:0}.e-form__indicators__indicator--shape-rounded{border-radius:5px}.e-form__indicators__indicator--shape-none{border:0}.e-form__indicators__indicator__label{text-align:center}.e-form__indicators__indicator__separator{width:100%;height:var(--e-form-steps-divider-width);background-color:#c2cbd2}.e-form__indicators--type-icon,.e-form__indicators--type-icon_text,.e-form__indicators--type-number,.e-form__indicators--type-number_text{align-items:flex-start}.e-form__indicators--type-icon .e-form__indicators__indicator__separator,.e-form__indicators--type-icon_text .e-form__indicators__indicator__separator,.e-form__indicators--type-number .e-form__indicators__indicator__separator,.e-form__indicators--type-number_text .e-form__indicators__indicator__separator{margin-top:calc(var(--e-form-steps-indicator-padding, 30px) \/ 2 - var(--e-form-steps-divider-width, 1px) \/ 2)}.elementor-field-type-hidden{display:none}.elementor-field-type-html{display:inline-block}.elementor-login .elementor-lost-password,.elementor-login .elementor-remember-me{font-size:.85em}.elementor-field-type-recaptcha_v3 .elementor-field-label{display:none}.elementor-field-type-recaptcha_v3 .grecaptcha-badge{z-index:1}.elementor-button .elementor-form-spinner{order:3}.elementor-form .elementor-button>span{display:flex;justify-content:center;align-items:center}.elementor-form .elementor-button .elementor-button-text{white-space:normal;flex-grow:0}.elementor-form .elementor-button svg{height:auto}.elementor-form .elementor-button .e-font-icon-svg{height:1em}.elementor-select-wrapper .select-caret-down-wrapper{position:absolute;top:50%;transform:translateY(-50%);inset-inline-end:10px;pointer-events:none;font-size:11px}.elementor-select-wrapper .select-caret-down-wrapper svg{display:unset;width:1em;aspect-ratio:unset;fill:currentColor}.elementor-select-wrapper .select-caret-down-wrapper i{font-size:19px;line-height:2}.elementor-select-wrapper.remove-before:before{content:\"\"!important}<\/style>\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"7917\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"65568df5\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4e3c9cf elementor-widget elementor-widget-text-editor\" data-id=\"4e3c9cf\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/how-to-add-domain-controller-to-an-existing-domain\/\">How to Add Domain Controller to an Existing Domain<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-0e0119e elementor-widget elementor-widget-heading\" data-id=\"0e0119e\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h3 class=\"elementor-heading-title elementor-size-default\">Enforcing LDAPS<\/h3>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4593500 elementor-widget elementor-widget-text-editor\" data-id=\"4593500\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>When you enable LDAPS, <a href=\"https:\/\/infrasos.com\/domain-controller-security-best-practices-hardening-checklist\/\">secured connections to domain controllers<\/a> become possible, but not guaranteed. To ensure that only protected LDAP queries are accepted by your domain controllers, enforce LDAP signing requirement on both client and server levels. The most effective approach is to use GPO for this purpose.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-c1f78ca elementor-widget elementor-widget-heading\" data-id=\"c1f78ca\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Configure Domain Controllers<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6e1973c elementor-widget elementor-widget-text-editor\" data-id=\"6e1973c\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>To configure the domain controllers to only accept the secured LDAP queries use two GPO objects. The first one, <strong>LDAP server signing requirements <\/strong>enforces the LDAPS usage, while the second, <strong>LDAP server channel binding token requirements<\/strong>, adds and <a href=\"https:\/\/infrasos.com\/active-directory-security-best-practices-protecting-your-environment\/\">extra security level by preventing attackers<\/a> from reusing TLS session credentials captured in another TLS session (more details are here: <a href=\"https:\/\/support.microsoft.com\/en-gb\/topic\/2020-2023-and-2024-ldap-channel-binding-and-ldap-signing-requirements-for-windows-kb4520412-ef185fb8-00f7-167d-744c-f299a66fc00a\" target=\"_blank\" rel=\"noopener\">2020, 2023, and 2024 LDAP channel binding and LDAP signing requirements for Windows (KB4520412)<\/a>).<\/p><ol><li>Logon to <a href=\"https:\/\/infrasos.com\/domain-controller-security-best-practices-hardening-checklist\/\">domain controller<\/a> and run the <strong>Group Policy Management<\/strong> console.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6373dc2 elementor-widget elementor-widget-image\" data-id=\"6373dc2\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/003.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Open group policy management console\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTY5ODksInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAyXC8wMDMucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"578\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/003-768x578.png\" class=\"attachment-medium_large size-medium_large wp-image-56989\" alt=\"Open group policy management console\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/003-768x578.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/003-300x226.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/003-720x542.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/003.png 779w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-8ca6da8 elementor-widget elementor-widget-text-editor\" data-id=\"8ca6da8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\">\n \t<li>In the hierarchy tree on the left side, navigate to <strong>Domains<\/strong> &gt; <strong>Domain Name<\/strong> &gt; <strong>Domain Controllers<\/strong>, right click on <strong>Default Domain Controllers Policy<\/strong> and select <strong>Edit<\/strong>.<\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5ca902d elementor-widget elementor-widget-image\" data-id=\"5ca902d\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/004.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Securing LDAP Communications in Active Directory  Edit the policy\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTY5OTAsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAyXC8wMDQucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"531\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/004-768x531.png\" class=\"attachment-medium_large size-medium_large wp-image-56990\" alt=\"Securing LDAP Communications in Active Directory Edit the policy\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/004-768x531.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/004-300x207.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/004-720x498.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/004.png 942w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-779fef8 elementor-widget elementor-widget-text-editor\" data-id=\"779fef8\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"3\">\n \t<li>In the appeared <strong>Group Policy Management Editor<\/strong> window, navigate to <strong>Computer Configuration<\/strong>\u00a0&gt;\u00a0<strong>Policies<\/strong>\u00a0&gt;\u00a0<strong>Windows Settings<\/strong>\u00a0&gt;\u00a0<strong>Security Settings<\/strong>\u00a0&gt;\u00a0<strong>Local Policies<\/strong> &gt; <strong>Security Options<\/strong>. In the list of options shown on the right side of the window, right-click\u00a0<strong>Domain controller: LDAP server signing requirements <\/strong>entry and click\u00a0<strong>Properties<\/strong>.<\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a5cb56d elementor-widget elementor-widget-image\" data-id=\"a5cb56d\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/005.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"select the configuration item\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU2OTkxIiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNFwvMDJcLzAwNS5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"549\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/005-768x549.png\" class=\"attachment-medium_large size-medium_large wp-image-56991\" alt=\"select the configuration item\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/005-768x549.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/005-300x214.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/005-1024x732.png 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/005-720x515.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/005.png 1066w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f941806 elementor-widget elementor-widget-text-editor\" data-id=\"f941806\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-reporting\/\">Know your users behaviour with Active Directory Reporting Tool<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f459377 elementor-widget elementor-widget-heading\" data-id=\"f459377\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h5 class=\"elementor-heading-title elementor-size-default\">Enable Define this Policy Setting <\/h5>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-da31496 elementor-widget elementor-widget-text-editor\" data-id=\"da31496\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"4\"><li>Following with the steps, in point 4, when the <strong>Properties<\/strong> window appears, enable\u00a0<strong>Define this policy setting<\/strong> checkbox. Then select <strong>Require signing<\/strong>\u00a0and click\u00a0<strong>OK<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-aeec993 elementor-widget elementor-widget-image\" data-id=\"aeec993\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/006.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Selecting the enforcing option\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTY5OTIsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAyXC8wMDYucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"517\" height=\"631\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/006.png\" class=\"attachment-medium_large size-medium_large wp-image-56992\" alt=\"Selecting the enforcing option\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/006.png 517w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/006-246x300.png 246w\" sizes=\"(max-width: 517px) 100vw, 517px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a19ef13 elementor-widget elementor-widget-text-editor\" data-id=\"a19ef13\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"5\">\n \t<li>In the\u00a0<strong>Confirm Setting Change<\/strong>\u00a0warning message, select\u00a0<strong>Yes<\/strong>.<\/li>\n \t<li>Right click on the <strong>Domain controller: LDAP server channel binding token requirements <\/strong>entry and click<strong> Properties.<\/strong><\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-66f6c9a elementor-widget elementor-widget-image\" data-id=\"66f6c9a\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/007.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Securing LDAP Communications in Active Directory  Selecting the configuration item\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTY5OTMsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAyXC8wMDcucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"550\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/007-768x550.png\" class=\"attachment-medium_large size-medium_large wp-image-56993\" alt=\"Securing LDAP Communications in Active Directory Selecting the configuration item\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/007-768x550.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/007-300x215.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/007-1024x734.png 1024w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/007-720x516.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/007.png 1059w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a2153dc elementor-widget elementor-widget-text-editor\" data-id=\"a2153dc\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"7\"><li>In<strong>\u00a0Properties <\/strong>window<strong>, <\/strong>enable\u00a0<strong>Define this policy setting<\/strong> option, select\u00a0either <strong>Always <\/strong>or<strong> When Supported <\/strong>value and click\u00a0<strong>OK<\/strong>. The value selection depends on your requirements \u2013 the preferable value is <strong>Always<\/strong> (recommended by many organizations, including <a href=\"https:\/\/www.tenable.com\/audits\/items\/CIS_DC_SERVER_2016_Level_1_v1.3.0.audit:398e73d42485f4f7d78f5329afea277b\" target=\"_blank\" rel=\"noopener\">Center for Internet Security<\/a>). However, if your network contains <a href=\"https:\/\/infrasos.com\/azure-ad-joined-vs-registered-devices-whats-the-difference\/\">devices<\/a> that don\u2019t support LDAP channel binding, consider using the <strong>When Supported<\/strong> value instead.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-9d3b657 elementor-widget elementor-widget-image\" data-id=\"9d3b657\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/008.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Selecting the binding enforcement option\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTY5OTQsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAyXC8wMDgucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"520\" height=\"629\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/008.png\" class=\"attachment-medium_large size-medium_large wp-image-56994\" alt=\"Selecting the binding enforcement option\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/008.png 520w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/008-248x300.png 248w\" sizes=\"(max-width: 520px) 100vw, 520px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-f77c0b5 elementor-widget elementor-widget-text-editor\" data-id=\"f77c0b5\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"8\"><li>Close the <strong>Group Policy Management Editor<\/strong> window.<\/li><\/ol><p>If you are not sure whether all LDAP clients support channel binding, set the When Enabled value and set monitoring tool to listen to 3074 and 3075 events on all Domain Controllers. It helps to identify the presence of such legacy devices and act accordingly.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-4e42f44 elementor-widget elementor-widget-text-editor\" data-id=\"4e42f44\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/domain-controller-security-best-practices-hardening-checklist\/\">Domain Controller Security Best Practices \u2013 Hardening (Checklist)<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-691f303 elementor-widget elementor-widget-heading\" data-id=\"691f303\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h4 class=\"elementor-heading-title elementor-size-default\">Configure Domain Controllers<\/h4>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-313ef37 elementor-widget elementor-widget-text-editor\" data-id=\"313ef37\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>To ensure that clients use LDAPS to send queries to domain controllers, you need to use GPO. The best way is to use <a href=\"https:\/\/infrasos.com\/group-policy-best-practices-gpo-security-settings\/\">Default Domain Policy<\/a>, as it covers all domain-joined objects. If there are clients external to the domain that use LDAP \u2013 use their vendor recommendations for enabling encrypted LDAP connections.<\/p><ol><li>Back in the <strong>Group Policy Management<\/strong> console, navigate to <strong>Domains<\/strong> &gt; <strong>Domain Name<\/strong>, right click on <strong>Default Domain Policy<\/strong> and select <strong>Edit<\/strong>.<\/li><\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-64b1af8 elementor-widget elementor-widget-image\" data-id=\"64b1af8\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/009.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Selecting the GPO to edit\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6IjU2OTk1IiwidXJsIjoiaHR0cHM6XC9cL2luZnJhc29zLmNvbVwvd3AtY29udGVudFwvdXBsb2Fkc1wvMjAyNFwvMDJcLzAwOS5wbmcifQ%3D%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"506\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/009-768x506.png\" class=\"attachment-medium_large size-medium_large wp-image-56995\" alt=\"Selecting the GPO to edit\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/009-768x506.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/009-300x198.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/009-720x475.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/009.png 939w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-05d73bf elementor-widget elementor-widget-text-editor\" data-id=\"05d73bf\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"2\">\n \t<li>In the appeared <strong>Group Policy Management Editor<\/strong> window, navigate to <strong>Computer Configuration<\/strong>\u00a0&gt;\u00a0<strong>Policies<\/strong> &gt; <strong>Windows Settings<\/strong>\u00a0&gt;\u00a0<strong>Security Settings<\/strong>\u00a0&gt;\u00a0<strong>Local Policies<\/strong> &gt; <strong>Security Options<\/strong>. In the list of options shown on the right side of the window, right-click\u00a0<strong>Network security: LDAP client signing requirements <\/strong>entry and click\u00a0<strong>Properties<\/strong>.<\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-bd8c988 elementor-widget elementor-widget-image\" data-id=\"bd8c988\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/010.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Securing LDAP Communications in Active Directory  Selecting the configuration item\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTY5OTYsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAyXC8wMTAucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"768\" height=\"549\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/010-768x549.png\" class=\"attachment-medium_large size-medium_large wp-image-56996\" alt=\"Securing LDAP Communications in Active Directory Selecting the configuration item\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/010-768x549.png 768w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/010-300x215.png 300w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/010-720x515.png 720w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/010.png 973w\" sizes=\"(max-width: 768px) 100vw, 768px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-2622268 elementor-widget elementor-widget-text-editor\" data-id=\"2622268\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"3\">\n \t<li>When the <strong>Properties<\/strong> window appears, enable\u00a0<strong>Define this policy setting<\/strong> option, select\u00a0<strong>Require signing<\/strong>\u00a0and click\u00a0<strong>OK<\/strong>.<\/li>\n<\/ol>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5e095eb elementor-widget elementor-widget-image\" data-id=\"5e095eb\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<a href=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/011.png\" data-elementor-open-lightbox=\"yes\" data-elementor-lightbox-title=\"Selecting the enforcement option\" data-e-action-hash=\"#elementor-action%3Aaction%3Dlightbox%26settings%3DeyJpZCI6NTY5OTcsInVybCI6Imh0dHBzOlwvXC9pbmZyYXNvcy5jb21cL3dwLWNvbnRlbnRcL3VwbG9hZHNcLzIwMjRcLzAyXC8wMTEucG5nIn0%3D\">\n\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"519\" height=\"632\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/011.png\" class=\"attachment-medium_large size-medium_large wp-image-56997\" alt=\"Selecting the enforcement option\" srcset=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/011.png 519w, https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/011-246x300.png 246w\" sizes=\"(max-width: 519px) 100vw, 519px\" \/>\t\t\t\t\t\t\t\t<\/a>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-5464090 elementor-widget elementor-widget-text-editor\" data-id=\"5464090\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<ol start=\"4\"><li>In the\u00a0<strong>Confirm Setting Change<\/strong>\u00a0warning message, select\u00a0<strong>Yes<\/strong>.<\/li><li>Close the <strong>Group Policy Management Editor<\/strong> window.<\/li><\/ol><p>For more details about this GPO see <a href=\"https:\/\/learn.microsoft.com\/en-us\/windows\/security\/threat-protection\/security-policy-settings\/network-security-ldap-client-signing-requirements\" target=\"_blank\" rel=\"noopener\">Network security: LDAP client signing requirements<\/a>. After the policy is applied to the client machines, they only establish secured connections to the domain controllers.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-932539e elementor-widget elementor-widget-text-editor\" data-id=\"932539e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Well, that is it. Article Securing LDAP Communications in Active Directory is concluded. We head over to a conclusion section. Thank you!<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-26ecf5f elementor-widget elementor-widget-text-editor\" data-id=\"26ecf5f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p><span style=\"color: #ff6600;\"><strong>Also Read\u00a0<a href=\"https:\/\/infrasos.com\/active-directory-security-best-practices-protecting-your-environment\/\">Active Directory Security Best Practices: Protect Your Environment<\/a><\/strong><\/span><\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-a520271 elementor-widget elementor-widget-heading\" data-id=\"a520271\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-large\">Conclusion Securing LDAP Communications in Active Directory<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-d3f602e elementor-widget elementor-widget-text-editor\" data-id=\"d3f602e\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>LDAP, being an open and vendor neutral protocol, serves as a fundamental tool for retrieving and managing data stored in <a href=\"https:\/\/infrasos.com\/active-directory-sites-and-services-best-practices\/\">directory services like AD DS<\/a>. Safeguarding LDAP communications within <a href=\"https:\/\/infrasos.com\/active-directory-reporting\/\">Active Directory<\/a> is necessary. The protocol is not secure by default and allows unencrypted connections. Enabling LDAPS emerges as a best practice to enhance LDAP protection. By encrypting LDAP traffic using TLS certificates, organizations mitigate the risk of man-in-the-middle attacks and ensure the <a href=\"https:\/\/infrasos.com\/active-directory-security-best-practices-protecting-your-environment\/\">confidentiality of data transmitted between clients and servers<\/a>. Moreover, enforcing the signing requirements through GPO (or any other managing tool) on both client and server levels ensures that only protected LDAP queries are accepted by domain controllers. It further mitigates the risk of <a href=\"https:\/\/infrasos.com\/group-policy-best-practices-gpo-security-settings\/\">unauthorized access<\/a> and potential security breaches.<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<section class=\"elementor-section elementor-top-section elementor-element elementor-element-4ccf17f7 elementor-section-content-middle ot-traditional elementor-section-boxed elementor-section-height-default elementor-section-height-default\" data-id=\"4ccf17f7\" data-element_type=\"section\" data-settings=\"{&quot;background_background&quot;:&quot;classic&quot;}\">\n\t\t\t\t\t\t<div class=\"elementor-container elementor-column-gap-extended\">\n\t\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-1e1ff797 ot-flex-column-vertical\" data-id=\"1e1ff797\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-26ab0307 elementor-widget elementor-widget-image\" data-id=\"26ab0307\" data-element_type=\"widget\" data-widget_type=\"image.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<img loading=\"lazy\" decoding=\"async\" width=\"113\" height=\"101\" src=\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/05\/InfraSOS-Logo-Icon-1.png\" class=\"attachment-full size-full wp-image-5788\" alt=\"InfraSOS-AD-Tools\" \/>\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t<div class=\"elementor-column elementor-col-50 elementor-top-column elementor-element elementor-element-1fd49561 ot-flex-column-vertical\" data-id=\"1fd49561\" data-element_type=\"column\">\n\t\t\t<div class=\"elementor-widget-wrap elementor-element-populated\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-element elementor-element-64c4d141 elementor-widget elementor-widget-heading\" data-id=\"64c4d141\" data-element_type=\"widget\" data-widget_type=\"heading.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<h2 class=\"elementor-heading-title elementor-size-default\">Try InfraSOS for FREE<\/h2>\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-7cf6a07f elementor-widget elementor-widget-text-editor\" data-id=\"7cf6a07f\" data-element_type=\"widget\" data-widget_type=\"text-editor.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t\t\t<p>Try InfraSOS Active Directory, Azure AD &amp; Office 365 Reporting &amp; Auditing Tool<\/p>\t\t\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-1dcbbf20 elementor-button-align-center elementor-invisible elementor-widget elementor-widget-global elementor-global-5815 elementor-widget-form\" data-id=\"1dcbbf20\" data-element_type=\"widget\" data-settings=\"{&quot;button_width&quot;:&quot;50&quot;,&quot;step_next_label&quot;:&quot;Next&quot;,&quot;step_previous_label&quot;:&quot;Previous&quot;,&quot;_animation&quot;:&quot;pulse&quot;,&quot;step_type&quot;:&quot;none&quot;,&quot;step_icon_shape&quot;:&quot;circle&quot;}\" data-widget_type=\"form.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t\t\t<form class=\"elementor-form\" method=\"post\" name=\"InfraSOS Email Capture\">\n\t\t\t<input type=\"hidden\" name=\"post_id\" value=\"56984\"\/>\n\t\t\t<input type=\"hidden\" name=\"form_id\" value=\"1dcbbf20\"\/>\n\t\t\t<input type=\"hidden\" name=\"referer_title\" value=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n\n\t\t\t\n\t\t\t<div class=\"elementor-form-fields-wrapper elementor-labels-above\">\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-type-email elementor-field-group elementor-column elementor-field-group-email elementor-col-50 elementor-field-required\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t<input size=\"1\" type=\"email\" name=\"form_fields[email]\" id=\"form-field-email\" class=\"elementor-field elementor-size-lg  elementor-field-textual\" placeholder=\"Enter your email address\" required=\"required\" aria-required=\"true\">\n\t\t\t\t\t\t\t\t\t\t\t<\/div>\n\t\t\t\t\t\t\t\t<div class=\"elementor-field-group elementor-column elementor-field-type-submit elementor-col-50 e-form__buttons\">\n\t\t\t\t\t<button type=\"submit\" class=\"elementor-button elementor-size-lg\">\n\t\t\t\t\t\t<span >\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\" elementor-button-icon\">\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-button-text\">Try InfraSOS FREE<\/span>\n\t\t\t\t\t\t\t\t\t\t\t\t\t<\/span>\n\t\t\t\t\t<\/button>\n\t\t\t\t<\/div>\n\t\t\t<\/div>\n\t\t<\/form>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t<div class=\"elementor-element elementor-element-6b67e541 elementor-icon-list--layout-inline elementor-list-item-link-full_width elementor-widget elementor-widget-icon-list\" data-id=\"6b67e541\" data-element_type=\"widget\" data-widget_type=\"icon-list.default\">\n\t\t\t\t<div class=\"elementor-widget-container\">\n\t\t\t<link rel=\"stylesheet\" href=\"https:\/\/infrasos.com\/wp-content\/plugins\/elementor\/assets\/css\/widget-icon-list.min.css\">\t\t<ul class=\"elementor-icon-list-items elementor-inline-items\">\n\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-icon\">\n\t\t\t\t\t\t\t<i aria-hidden=\"true\" class=\"fas fa-arrow-up\"><\/i>\t\t\t\t\t\t<\/span>\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">Free 15-Days Trial<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t\t\t<li class=\"elementor-icon-list-item elementor-inline-item\">\n\t\t\t\t\t\t\t\t\t\t<span class=\"elementor-icon-list-text\">SaaS AD Reporting & Auditing Solution<\/span>\n\t\t\t\t\t\t\t\t\t<\/li>\n\t\t\t\t\t\t<\/ul>\n\t\t\t\t<\/div>\n\t\t\t\t<\/div>\n\t\t\t\t\t<\/div>\n\t\t<\/div>\n\t\t\t\t\t\t\t<\/div>\n\t\t<\/section>\n\t\t\t\t\t\t\t<\/div>\n\t\t","protected":false},"excerpt":{"rendered":"<p>What is LDAP? Securing LDAP Communications in Active Directory. Lightweight directory access protocol (LDAP) is an open protocol used to lookup information within a network. LDAP is often used to retrieve some piece of information from the directory server which is usually a certain kind of database. Directory servers, such as Active Directory Domain Services [&hellip;]<\/p>\n","protected":false},"author":14,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[33],"tags":[47,45,68],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v20.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Securing LDAP Communications in Active Directory<\/title>\n<meta name=\"description\" content=\"What is LDAP? Securing LDAP Communications in Active Directory. Lightweight directory access protocol (LDAP) is an open protocol used to lookup\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Securing LDAP Communications in Active Directory\" \/>\n<meta property=\"og:description\" content=\"What is LDAP? Securing LDAP Communications in Active Directory. Lightweight directory access protocol (LDAP) is an open protocol used to lookup\" \/>\n<meta property=\"og:url\" content=\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\" \/>\n<meta property=\"og:site_name\" content=\"Active Directory Tools, Report, Monitor &amp; Manage AD\" \/>\n<meta property=\"article:publisher\" content=\"https:\/\/www.facebook.com\/infrasos\/\" \/>\n<meta property=\"article:published_time\" content=\"2024-03-04T10:00:00+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2024-03-01T18:02:18+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/001-768x295.png\" \/>\n<meta name=\"author\" content=\"Marat M\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:creator\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:site\" content=\"@infra_sos\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Marat M\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"9 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\"},\"author\":{\"name\":\"Marat M\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86\"},\"headline\":\"Securing LDAP Communications in Active Directory\",\"datePublished\":\"2024-03-04T10:00:00+00:00\",\"dateModified\":\"2024-03-01T18:02:18+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\"},\"wordCount\":1348,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"keywords\":[\"active directory\",\"cybersecurity\",\"windows server\"],\"articleSection\":[\"Active Directory\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\",\"url\":\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\",\"name\":\"Securing LDAP Communications in Active Directory\",\"isPartOf\":{\"@id\":\"https:\/\/infrasos.com\/#website\"},\"datePublished\":\"2024-03-04T10:00:00+00:00\",\"dateModified\":\"2024-03-01T18:02:18+00:00\",\"description\":\"What is LDAP? Securing LDAP Communications in Active Directory. Lightweight directory access protocol (LDAP) is an open protocol used to lookup\",\"breadcrumb\":{\"@id\":\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/infrasos.com\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Securing LDAP Communications in Active Directory\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/infrasos.com\/#website\",\"url\":\"https:\/\/infrasos.com\/\",\"name\":\"Active Directory Tools, Report, Monitor &amp; Manage AD\",\"description\":\"Active Directory &amp; Office 365 SaaS Reporting Tool\",\"publisher\":{\"@id\":\"https:\/\/infrasos.com\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/infrasos.com\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/infrasos.com\/#organization\",\"name\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\",\"url\":\"https:\/\/infrasos.com\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"contentUrl\":\"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png\",\"width\":113,\"height\":101,\"caption\":\"InfraSOS - Active Directory & Office 365 Reporting Tools\"},\"image\":{\"@id\":\"https:\/\/infrasos.com\/#\/schema\/logo\/image\/\"},\"sameAs\":[\"https:\/\/www.facebook.com\/infrasos\/\",\"https:\/\/twitter.com\/infra_sos\",\"https:\/\/www.linkedin.com\/showcase\/86283876\",\"https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg\"]},{\"@type\":\"Person\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86\",\"name\":\"Marat M\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/infrasos.com\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g\",\"caption\":\"Marat M\"},\"description\":\"System administrator with 14 years of practical experience. Specializes in Microsoft products such as Exchange Server, Active Directory, Microsoft 365 and Azure.\",\"url\":\"https:\/\/infrasos.com\/author\/marat-4fgmail-com\/\"}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Securing LDAP Communications in Active Directory","description":"What is LDAP? Securing LDAP Communications in Active Directory. Lightweight directory access protocol (LDAP) is an open protocol used to lookup","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/","og_locale":"en_US","og_type":"article","og_title":"Securing LDAP Communications in Active Directory","og_description":"What is LDAP? Securing LDAP Communications in Active Directory. Lightweight directory access protocol (LDAP) is an open protocol used to lookup","og_url":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/","og_site_name":"Active Directory Tools, Report, Monitor &amp; Manage AD","article_publisher":"https:\/\/www.facebook.com\/infrasos\/","article_published_time":"2024-03-04T10:00:00+00:00","article_modified_time":"2024-03-01T18:02:18+00:00","og_image":[{"url":"https:\/\/infrasos.com\/wp-content\/uploads\/2024\/02\/001-768x295.png"}],"author":"Marat M","twitter_card":"summary_large_image","twitter_creator":"@infra_sos","twitter_site":"@infra_sos","twitter_misc":{"Written by":"Marat M","Est. reading time":"9 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/#article","isPartOf":{"@id":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/"},"author":{"name":"Marat M","@id":"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86"},"headline":"Securing LDAP Communications in Active Directory","datePublished":"2024-03-04T10:00:00+00:00","dateModified":"2024-03-01T18:02:18+00:00","mainEntityOfPage":{"@id":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/"},"wordCount":1348,"commentCount":0,"publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"keywords":["active directory","cybersecurity","windows server"],"articleSection":["Active Directory"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/","url":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/","name":"Securing LDAP Communications in Active Directory","isPartOf":{"@id":"https:\/\/infrasos.com\/#website"},"datePublished":"2024-03-04T10:00:00+00:00","dateModified":"2024-03-01T18:02:18+00:00","description":"What is LDAP? Securing LDAP Communications in Active Directory. Lightweight directory access protocol (LDAP) is an open protocol used to lookup","breadcrumb":{"@id":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/infrasos.com\/securing-ldap-communications-in-active-directory\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/infrasos.com\/"},{"@type":"ListItem","position":2,"name":"Securing LDAP Communications in Active Directory"}]},{"@type":"WebSite","@id":"https:\/\/infrasos.com\/#website","url":"https:\/\/infrasos.com\/","name":"Active Directory Tools, Report, Monitor &amp; Manage AD","description":"Active Directory &amp; Office 365 SaaS Reporting Tool","publisher":{"@id":"https:\/\/infrasos.com\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/infrasos.com\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/infrasos.com\/#organization","name":"InfraSOS - Active Directory & Office 365 Reporting Tools","url":"https:\/\/infrasos.com\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/","url":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","contentUrl":"https:\/\/infrasos.com\/wp-content\/uploads\/2022\/10\/InfraSOS-Logo-Icon.png","width":113,"height":101,"caption":"InfraSOS - Active Directory & Office 365 Reporting Tools"},"image":{"@id":"https:\/\/infrasos.com\/#\/schema\/logo\/image\/"},"sameAs":["https:\/\/www.facebook.com\/infrasos\/","https:\/\/twitter.com\/infra_sos","https:\/\/www.linkedin.com\/showcase\/86283876","https:\/\/www.youtube.com\/channel\/UCfGszuZdgxZYBg8DGIWxXCg"]},{"@type":"Person","@id":"https:\/\/infrasos.com\/#\/schema\/person\/91383d9702fb0e1cf1ad74c02a1a1e86","name":"Marat M","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/infrasos.com\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/4cae23af7c9550258e5289df67d06080?s=96&d=mm&r=g","caption":"Marat M"},"description":"System administrator with 14 years of practical experience. Specializes in Microsoft products such as Exchange Server, Active Directory, Microsoft 365 and Azure.","url":"https:\/\/infrasos.com\/author\/marat-4fgmail-com\/"}]}},"_links":{"self":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/56984"}],"collection":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/users\/14"}],"replies":[{"embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/comments?post=56984"}],"version-history":[{"count":32,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/56984\/revisions"}],"predecessor-version":[{"id":57383,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/posts\/56984\/revisions\/57383"}],"wp:attachment":[{"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/media?parent=56984"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/categories?post=56984"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/infrasos.com\/wp-json\/wp\/v2\/tags?post=56984"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}