AD LDAP session security requirements

Timelines and exceptions · All guidance changes

Active Directory · Official Microsoft guidanceObserved changes retained

Retained observation

Source metadata changed; retained article content is unchanged.

Documentation metadata only

Read the current Microsoft source · Link to this observation · Compare any two versions

Observation details · observed 6 Oct 17:57 UTC

Observed by ChangeIntel: 6 Oct 17:57 UTC
Source update metadata: 18 Feb 02:05 UTC
First observed on this installation: 5 Oct 17:50 UTC
Last successful check: today 20:00 UTC
Next check due: 21 Oct 02:00 UTC

Observation time is not publication time, and a comparison does not establish an effective date. Full source bodies are not published; this page holds generated summaries, section headings and, as the page's license allows, Microsoft's changed wording. A documentation edit does not confirm feature availability in an environment.

This is an earlier observation; review the latest in My radar.

Timeline

From the capture of 6 Oct 17:57 UTC · an earlier observation

Legacy capture: table structure or oversized sections are unavailable for extraction

1 recorded change

Microsoft's revision log on this page · 10 entries

Dates from the page's own change log or history section. They describe earlier edits, not upcoming policy.

LDAP session security settings and requirements after ADV190023 is installedRequirement1 condition
LDAP session security settings and requirements after ADV190023 is installedRequirement1 condition
LDAP session security settings and requirements after ADV190023 is installedScope
SummaryRequirement
More informationRequirementRecommendation
LDAP sessions not using TLS/SSL, binding by using SASLException2 conditions
Man-In
LDAP sessions using TLS/SSL, binding by using certificate for user authenticationException1 condition
LDAP Sessions using TLS/SSL, binding with SASL for user authenticationException2 conditions
LDAP Sessions using TLS/SSL, binding with SASL for user authenticationRequirement1 condition
LdapEnforceChannelBinding
LDAP Sessions using TLS/SSL, binding with SASL for user authenticationRequirement

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

4 Jun 2024
No longer on the page LDAP session security settings and requirements after ADV190023 is installed Microsoft's source, commit 44c2ff2

Observed history and review priority

Captured 6 Oct 17:57 UTC; extracted 16 Oct 16:10 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/legacy.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 5

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

12 Oct 19:50 UTC · 8 candidates
6 Oct 17:57 UTC · 11 candidates
5 Oct 17:50 UTC · 11 candidates
4 Jun 2024 09:05 UTC · 8 candidates
5 Feb 2024 07:34 UTC · 9 candidates

Microsoft's edits

History on GitHub

Commits to the page's source in MicrosoftDocs/SupportArticles-docs, with Microsoft's own messages. Commit dates can be hours or days before Learn publishes the change. ChangeIntel keeps a copy of each diff, so an edit stays readable here if GitHub stops serving it. Read 19 Oct 23:40 UTC.

18 Feb 00:06 UTC update Metadata onlyServed on LearnView diff
4 Jun 2024 09:05 UTC Update View diff
5 Feb 2024 07:34 UTC update ad View diff

8 metadata-only edits · author, dates or topic labels, no article text

12 Sep 2025 02:45 UTC Add Applies To value to Windows Server Metadata onlyView diff
21 Feb 2025 07:37 UTC add pcys Metadata onlyView diff
17 Jan 2025 09:20 UTC Init Metadata onlyView diff
25 Sep 2024 06:00 UTC Remove localization metadata for 1825 articles Metadata onlyView diff
21 Mar 2024 05:19 UTC Add sap values for 981 articles Metadata onlyView diff
23 Feb 2024 09:04 UTC Update Metadata onlyView diff
19 Feb 2024 08:15 UTC correct number Metadata onlyView diff
19 Feb 2024 08:04 UTC Update ms.date as they are reviewed Metadata onlyView diff

Community source · 19 Oct 2026
Should You Install Certificate Authority on a Domain Controller? PKI Design Best Practices
Public source · 19 Oct 2026
Retiring NTLM: Frequently asked questions
Public source · 13 Oct 2026
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Public source · 13 Oct 2026
Active Directory Federation Services (AD FS) Spoofing Vulnerability
Public source · 13 Oct 2026
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability
Public source · 13 Oct 2026
Active Directory Federation Services (AD FS) Security Feature Bypass Vulnerability

Retained observations

12 Oct 19:50 UTC
9 removed passages (about 60 words). The changed wording mentions prerequisites, supported platforms. Review the source to confirm the effect.
6 Oct 17:57 UTC · shown above
5 Oct 17:50 UTC
Baseline for retained history; no earlier retained text to compare.

What changed

First observed 18 Oct 2026

No field changes in the recorded history.

Cite this recorded revision to keep the same title, summary, facts and links when the page changes.

A day selects the latest observation by the end of that UTC day; today's selection can change until midnight. History starts when this installation records it.