2,241
2,351
1,658
1,350
2,230
8,993
404
437
531
444
342
342
321
339
346
509
751
1,405
1,882
331
352
317
305
321
314
298
309
296
360
304
romuel
in
LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates
on
12-06-2019
@Ricoli610My tests confirm your remarks:DC: LDAP server signing
requirement: None (default) means ldapserverintegrity registry value
1DC: LDAP server signing requirement: Required means ldapserverintegrity
registry value 2(and not 0 and 1 as expected, which is confusing) This
would mean that the pre...
0 Likes
Dustin Adam
in
BitLocker, Intune, and Raven
on
12-05-2019
@Paul Bergson; Great Article, my organization has moved to using InTune
for BitLocker management and reporting, and it works spectacularly well.
However, one thing your article leaves out that we had to learn the hard
way: As a Hybrid-Join tenant, BitLocker will only escrow the BitLocker
key to AD O...
0 Likes
Ricoli610
in
LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates
on
12-04-2019
@Alan La Pietra @ChadWst Thank you for all the additional information
and links.Just flagging up that I've tried changing the Domain
controller: LDAP server signing requirements setting in the DDCP from
None to Required and this changed the ldapserverintegrity registry entry
from 1 to 2 (below
HKLM\...
0 Likes
Alan La Pietra
in
LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates
on
12-04-2019
Adding some other information Important to point out: LDAP over TLS/SSL
communication are already signed as TLS would detect any modification of
the payload as it can't be decrypted. The behavior for LDAP simple binds
and LDAP simple binds through SSL are as follows: LDAP simple binds are
rejected I...
0 Likes
ChadWst
in
LDAP Channel Binding and LDAP Signing Requirements - JANUARY 2020 Updates
on
12-04-2019
@Alan La Pietra -- Another follow-up to your response. Up til this point
I have considered LDAP signing and LDAP CBT mutually exclusive. Is this
accurate? For example, could we disable LDAP signing=REQUIRED and move
forward with CBT = 1? These changes dont have to be done together right?
0 Likes