What's new in Windows Server 2025

Click here for more information

Active Directory Domain Services

The latest enhancements to Active Directory Domain Services (AD DS) and Active Directory Lightweight Domain Services (AD LDS) introduce a range of new functionalities and capabilities aimed at optimizing your domain management experience:

1. 32k database page size optional feature

2. AD schema updates

3. AD object repair

4. Channel binding audit support

5. DC-location algorithm improvements

6. Forest and Domain Functional Levels

7. Improved algorithms for Name/Sid Lookups

8. Improved security for confidential attributes

9. Improved security for default machine account passwords

10. Kerberos PKINIT support for cryptographic agility

11. LAN Manager GPO setting

12. LDAP encryption by default

13. LDAP support for TLS 1.3

14. Legacy SAM RPC password change behavior

15. NUMA support

16. Performance counters (DC Locator, LSA Lookups, LDAP Client)

17. Replication priority order