Windows error 8232 (ERROR_DS_STRONG_AUTH

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The LDAP server requires stronger authentication or integrity protection than the client used.

Previous	Next
ERROR_DS_AUTH_METHOD_NOT_SUPPORTED	ERROR_DS_INAPPROPRIATE_AUTH

ERROR_DS_STRONG_AUTH_REQUIRED

ERROR_DS_STRONG_AUTH_REQUIRED (0x00002028) is an Active Directory Domain Services LDAP result. The LDAP server requires stronger authentication or integrity protection than the client used.

What to check

Check whether the domain controller requires LDAP signing or whether the client attempted an unsigned simple bind.
Use LDAPS or SASL/Kerberos with signing as appropriate for the client and directory policy.
Use Directory Service events to identify the client and bind method instead of disabling the security requirement.

Useful command

Test-NetConnection "<dc-fqdn>" -Port 636

Microsoft: LDAP signing · Microsoft: Troubleshoot LDAPS · Microsoft: AD DS diagnostic logging

Looking for a different code? Search another status or error code.