Event ID 2887 — LDAP signing

[ihaveaproblem]

I'm getting this event logged on a new domain

Event ID 2887

 

I was thinking of following the instructions on the link above to reject simple LDAP binds, but before I did this I am a bit concerned if it will effect anything?

Will user accounts perform as normal ? just make it more secure? Or will I need to configure additional settings on user accounts and devices to make them connect in aecure way?

 

Any advice appreciated:) Don't want to bugger anything up !

[ChrisMiles]

Disabling simple LDAP binds has the potential to break a load of stuff or it may not break anything, depends what you have installed that uses ldap binds to integrate with Active Directory. It shouldn't break any Windows clients though.

 

I suggest you do as the message suggests and enable additional logging so you can see what is connecting in that way before considering whether or not to disable them.

[ihaveaproblem]

Thanks Chris.

I think I'll leave it for now ^^ Don't want to break anything..