Do i need LDAP in my AD server for ad sync?

Hello naveen palla ,

By any chance, are you trying to set this up on a Windows Server 2025 or Windows Server 2022 23H2 Domain Controller?

If so, the "Strong Authentication is required for this operation" message could be due to changes in LDAP signing requests introduced in the 2022 23H2 and 2025 Server editions. The default AD configuration does not allow the ADSync tool to authenticate successfully in AD.

To allow the ADSync tool to authenticate successfully in Active Directory, the LDAP security settings need to be adjusted as follows:

1. Open the Domain Controller Policy editor.
2. Go to Computer Configuration > Policies > Windows Settings > Security Settings >Local Policies > Security Options.
3. Make the following changes:
    
   • Domain controller: LDAP server channel binding token requirements: When Supported
   • Domain controller: LDAP server signing requirements: None
   • Domain controller: LDAP server Enforce signing requirements: Disabled
   • Network security: LDAP client encryption requirements: Negotiate Sealing
   • Network security: LDAP client signing requirements: Negotiate Signing

This change will configure LDAP signing requests to the same default levels assigned to Windows Servers 2022.

Let us know how it goes.