AD LDAP signing enforcement policies

Timelines and exceptions

Timeline

From the capture of 18 Dec 2025 15:53 UTC · an earlier observation

Source history: extracted from the page's source file at a commit; shared includes are not expanded

1 relative period
5 undated sections
5 with conditions
9 recorded changes

Relative periods

Counted from an event the source describes, such as installing an update; they are not calendar dates.

every 24 hoursIdentify clients using unsigned LDAP bindsMilestone1 condition

Requirements, exceptions and scope

Manage LDAP signing using Group Policy for Active Directory Domain ServiceScope1 condition1 passage
Identify clients using unsigned LDAP bindsScope1 passage
Client computersRequirementRecommendation2 conditions3 passages
Domain controllersRecommendation1 condition2 passages
Configure LDAP signing for Active Directory Lightweight Directory ServicesRequirement1 passage

Extracted automatically from Microsoft's wording. Confirm dates, conditions and whether they apply to you in the source before acting; a month or quarter is a window, not a day.

How this timeline changed

Changes between ChangeIntel's readings of the page, between commits of its source file where Microsoft publishes it, in Internet Archive copies of pages that keep no other history, and entries from Microsoft's own change log (dated as Microsoft dates them). Edits between readings that neither records are unknown.

18 Dec 2025
No longer on the page Client computers Microsoft's source, commit 6940c95
18 Dec 2025
Recommendation added Domain controllers Microsoft's source, commit 6940c95
18 Dec 2025
Recommendation added Domain controllers Microsoft's source, commit 6940c95
18 Dec 2025
No longer on the page Domain controllers Microsoft's source, commit 6940c95
18 Dec 2025
No longer on the page Domain controllers Microsoft's source, commit 6940c95
18 Dec 2025
No longer on the page Identify clients using unsigned LDAP binds Microsoft's source, commit 6940c95
18 Dec 2025
No longer on the page Verify LDAP signing configuration Microsoft's source, commit 6940c95
18 Dec 2025
Scope added Manage LDAP signing using Group Policy for Active Directory Domain Service Microsoft's source, commit 6940c95
18 Dec 2025
No longer on the page Manage LDAP signing using Group Policy Microsoft's source, commit 6940c95

Observed history and review priority

Captured 18 Dec 2025 15:53 UTC; extracted 19 Oct 17:02 UTC. Extractor: microsoft-1/9/fc65ebeb286710c0a830833db8a7e5de7e266b79981fe9c7c34479be9369ad3c/source-commit.

Earlier unavailable versions and edits between checks are unknown. A missing statement requires review; it does not mean the policy was cancelled. Recovered historical statements are not original revision snapshots.

Retained observations · 7

Compact evidence remains available after full document bodies expire. Earlier extractions can have different vocabulary or capture limitations.

12 Oct 19:50 UTC · 16 candidates
6 Oct 17:57 UTC · 16 candidates
5 Oct 17:50 UTC · 16 candidates
2 Oct 15:51 UTC · 15 candidates
15 Jan 15:53 UTC · 12 candidates
18 Dec 2025 15:53 UTC · 10 candidates
17 Dec 2025 16:58 UTC · 13 candidates