Blog Post

Core Infrastructure and Security Blog

10 MIN READ

LDAP Channel Binding and LDAP Signing Requirements - Server 2025 updates

Microsoft

Nov 04, 2019

This information is preliminary and is subject to revision. This article is a living document, written over time and is subject to change. When guidance presented in this article is in direct confli...

Updated Sep 18, 2025

Version 63.0

alanlapietra

AlanLaPietra

Microsoft

Joined October 17, 2017

View Profile

Core Infrastructure and Security Blog

Follow this blog board to get notified when there's new activity

Arian_van_der_Pijl

Iron Contributor

Mar 22, 2021

Is it necessary to enable an 'LDAPS certificate' on all Domain Controllers?

nslookup -type=srv _ldap._tcp.DOMAINNAME

I assume a client can obtain any LDAP server in the domain by quering DNS but if not all Domain Servers are LDAPS enabled will this fail? Or does the client query all LDAP servers obtained from the srv lookup?