How to fix error error-ds-strong-auth-required in Windows 11

Solution Steps

1. 1 Press Windows key + R, type 'dsa.msc' and press Enter to open Active Directory Users and Computers. This is the main tool for managing users and groups. You need to check the security settings for the affected user or computer.
2. 2 Right-click the domain root and select 'Properties'. Go to the 'Security' tab. Look for the 'LDAP' settings. Ensure that 'Require strong authentication' is enabled. If it's not, you may need to enable it to comply with security policies.
3. 3 If you're using a script or application that uses LDAP simple bind, update it to use Kerberos authentication. This is a code change. For example, in PowerShell, use 'Get-ADUser -Server domain.com -Credential (Get-Credential)' which uses Kerberos by default.
4. 4 Check the domain controller's event logs for more details. Press Windows key + X and select 'Event Viewer'. Navigate to 'Windows Logs > Security' and look for event ID 2889 or 2888, which indicate authentication issues.
5. 5 If the error persists, contact your domain administrator to verify that the user account is not locked out or that the password is correct. Sometimes the issue is simply a wrong password or expired account.