-
Title
GPOAdmin and the latest LDAP channel binding and LDAP signing requirements for Windows -
Description
Starting in March 2020, Microsoft will begin enforcing LDAP channel binding and LDAP signing to increase the security of network communications between an Active Directory Domain Services (AD DS) or an Active Directory Lightweight Directory Services (AD LDS) and its clients.
ADV190023 | Microsoft Guidance for Enabling LDAP Channel Binding and LDAP Signing
https://portal.msrc.microsoft.com/en-us/security-guidance/advisory/ADV190023
2020 LDAP channel binding and LDAP signing requirement for Windows
Microsoft advises customers to pre-emptively enable LDAP channel binding and LDAP signing between now and March 2020 to find and fix any operating systems, applications or other compatibility issues.
Are these changes known to impact GPOAdmin 5.13.5 or higher?
-
Cause
Microsoft intends to release a security update on Windows Update to enable LDAP channel binding and LDAP signing. These changes are anticipated in March 2020.
-
Resolution
The GPOAdmin Development team has performed testing with the latest LDAP security settings enabled and did not encounter any issues.