Dear Community, We are in the process of enabling new security features in our AD environment. We want to enable following: Disabling Kerberos Weak Encryption i.e. (DES ) How to hide sensitive identifiers in Active Directory Object Descriptions Enforce LDAP signing by configuring Group Policy settings to require signing and validating it using PowerShell or the GPMC. Enabling LAPS - LAPS Local Administrator Password Management what are the best practices to do above and what be the side effects when we enable above settings?

Improving AD security and enabling new features

Seema Kanwal Gurmani 341

Dear Community,

We are in the process of enabling new security features in our AD environment. We want to enable following:

Disabling Kerberos Weak Encryption i.e. (DES )
How to hide sensitive identifiers in Active Directory Object Descriptions
Enforce LDAP signing by configuring Group Policy settings to require signing and validating it using PowerShell or the GPMC.
Enabling LAPS - LAPS Local Administrator Password Management
what are the best practices to do above and what be the side effects when we enable above settings?