Blog Post

Core Infrastructure and Security Blog
8 MIN READ

LDAP Channel Binding and LDAP Signing Requirements - Server 2025 updates

AlanLaPietra's avatar
AlanLaPietra
Icon for Microsoft rankMicrosoft
Nov 04, 2019
This information is preliminary and is subject to revision. This article is a living document, written over time and is subject to change. When guidance presented in this article is in direct confli...
Updated Nov 04, 2025
Version 65.0
alanlapietra
CFSBC's avatar
CFSBC
Copper Contributor
Jul 25, 2022

I have enabled verbose logging for the Directory Services log to check for Event 2889 on our Windows Server 2012 R2 DCs (via the DC GPO LDAP Signing is set to None). There are many entries due to the OSX workstations and vCenter servers joined to our AD. I recently began replacing the DCs with Windows Server 2019. When I turn on the verbose logging I do not see a single Event 2889 on the Windows 2019 DCs, even after several days.

 

Is there an explanation for this?