ADMX Viewer
Microsoft.Policies.SecGuide• Machine

Extended Protection for LDAP Authentication (Domain Controllers only) (DEPRECATED)

Download ADMX

Beginning with the Windows 10 and Windows Server v2004 security baseline this setting has been moved to Security Options\Domain controller: LDAP server channel binding token requirements.

Policy Details

Policy Name
Pol_SecGuide_0100_LdapEnforceChannelBinding
Registry Key
System\CurrentControlSet\Services\NTDS\Parameters
Value Name
LdapEnforceChannelBinding
Supported On
Windows Server 2008 and newer
Available Languages
en-us

Configuration Elements

Configure LdapEnforceChannelBinding

Type: enum

Allowed Values
  • 2 Enabled, always (recommended)
  • 1 Enabled, when supported
  • 0 Disabled