Switching from LDAP to Secure LDAPS

Default installation of Active Directory allows simple LDAP binds out of the box. This works nicely, but nowadays such deployments are considered insecure, so Microsoft recommends that you switch to more secure LDAPS according to the article https://support.microsoft.com/en-us/topic/2020-2023-and-2024-ldap-channel-binding-and-ldap-signing-requirements-for-windows-kb4520412-ef185fb8-00f7-167d-744c-f299a66fc00a.

The following steps of this tutorial will explain how this can be done.

• Identify Simple LDAP Bindings
• Enable LDAPS in Active Directory
• Switch to LDAPS
  • Case 1. LDAPS in Active Directory is NOT configured yet
  • Case 2. LDAPS in Active Directory IS already configured
• Disable Simple LDAP