Skip to content
ADHardening

Guides tagged

#ldap-signing

← Back to all guides
NTLM & Legacy Protocols

Enforce LDAP signing and channel binding on DCs

Roll out LDAP signing and channel binding with evidence: collect events 2887, 2889 and 3039, fix clients, then set LdapEnforceChannelBinding safely.

Intermediate
NTLM & Legacy Protocols

Stop NTLM relay: LDAP, SMB signing and LLMNR

Harden LDAP signing, LDAP channel binding, SMB signing, and disable LLMNR/NBT-NS to shut down NTLM relay paths against domain controllers.

Foundation