Active Directory Authentication is not working

Hello Georg Zoeller ,

Thank you for reaching out to the community, Event Id 4634 logon type 3 means that the user or computer logged on to this computer from the network. The user or computer accesses the computer from the network or tries to access shared resources on the computer, it logs the event id 4634 logon type 3 event. for the ref: https://shellgeek.com/event-id-4634-an-account-was-logged-off/ Yea can reboot the machine and try again !

I restarted the domain controller, however it's still not working, i also have to say that theres G-Data protection running on the domain controller, however the clients are also being registered using tcp 389, so i suppose it has to work? What am i missing here, the old administrator of the server also didnt leave any documentatin whatsoever

I don't know how it is with Windows Server 2012 but we had to switch from port 389 to 636 in 2020 because Microsoft started enforcing LDAPS (we use Windows Server 2019). These are our settings on the UTM now:

If you use recipient verification in the SMTP proxy you also have to change a config file in the UTM via SSH: www.frankysweb.de/.../

Hi, no server 2012 uses regualr ldap, already tried it in a lab, i'm pretty sure that it's problem related to the antivirus solution at the customer.

Do you guys have any more ideas, otherwise i will contact the Antivirus's support that is running on the server.

Are you aware oft the recent domain join hardening changes introduced by microsoft?

See KB5020276 and note the modified timeline, especially the depreciation of NetJoinLegacyAccountReuse after Aug 10 2023.

I have already recreated the exact sitation in a lab, the newest patches were installed on my machine, it was working witthout a problem

i also just tried to domain join the sophos to the active directoy, it's now saying it was successfully joine to the domain, however the surprising this is that the authentication server is still staying failed to bind to ldap

And the logon type is 4672 in the event viewer for the domain join of the sophos 

Hey Georg Zoeller  refer - Troubleshoot issues when joining the UTM to an Active Directory domain.