What does Windows error code 8232 (ERROR_DS_STRONG_AUTH_REQUIRED) mean?

ERROR_DS_STRONG_AUTH_REQUIRED

ERROR_DS_STRONG_AUTH_REQUIRED (0x00002028) is an Active Directory Domain Services LDAP result. The LDAP server requires stronger authentication or integrity protection than the client used.

Determine whether the server requires LDAP signing, channel binding, TLS, or another stronger bind path for this request. Update the client to meet that requirement rather than disabling directory security controls globally.

What to check

• Check whether the domain controller requires LDAP signing or whether the client attempted an unsigned simple bind.
• Use LDAPS or SASL/Kerberos with signing as appropriate for the client and directory policy.
• Use Directory Service events to identify the client and bind method instead of disabling the security requirement.

Useful command

Test-NetConnection "<dc-fqdn>" -Port 636

Microsoft: LDAP signing · Microsoft: Troubleshoot LDAPS · Microsoft: AD DS diagnostic logging