What does Windows error code 8231 (ERROR_DS_AUTH_METHOD_NOT_SUPPORTED) mean?

Status / error code:		Category:

Constant name:
Source:		Operating System:
Description: The LDAP server does not support the authentication method requested by the client.

Previous	Next
ERROR_DS_COMPARE_TRUE	ERROR_DS_STRONG_AUTH_REQUIRED

ERROR_DS_AUTH_METHOD_NOT_SUPPORTED

ERROR_DS_AUTH_METHOD_NOT_SUPPORTED (0x00002027) is an Active Directory Domain Services LDAP result. The LDAP server does not support the authentication method requested by the client.

Record the bind mechanism the client actually attempted and the capabilities advertised by the server. Select a supported LDAP authentication method rather than weakening transport or directory policy to accommodate an obsolete client mechanism.

What to check

Verify whether the client is using simple bind, SASL, Kerberos, NTLM, or another mechanism expected by the server.
Check whether LDAP signing, channel binding, or LDAPS policy makes the selected method unacceptable.
Test a supported authentication path without weakening domain security policy.

Useful command

Test-NetConnection "<dc-fqdn>" -Port 636

Microsoft: LDAP signing · Microsoft: Troubleshoot LDAPS · Microsoft: AD DS LDAP operations

Looking for a different code? Search another status or error code.