How to fix error error-ds-inappropriate-auth in Windows 11

Solution Steps

1. 1 Identify the application or script that is triggering the error. Check the event logs: press Windows key + X, select 'Event Viewer', and look under 'Windows Logs > Directory Service' for related events.
2. 2 If you're using a script, modify it to use a more appropriate authentication method. For example, in PowerShell, use 'Get-ADUser -Server domain.com -Credential (Get-Credential)' which uses Kerberos by default. Avoid using 'LDAP simple bind' unless absolutely necessary.
3. 3 If you're using a third-party LDAP tool, configure it to use Kerberos or certificate-based authentication. This is usually found in the connection settings of the tool.
4. 4 Check the domain controller's security policy to see what authentication methods are allowed. You may need to adjust the policy to permit the method you're using, but this should be done by an administrator.
5. 5 If the error occurs during a specific operation like resetting a password, ensure you have the necessary permissions. You might need to delegate control or use an account with higher privileges.