cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
Susan_A
Lansweeper Alumni

TL;DR-Sweepy-Icon (1).png
This article explains how to set up LDAPS for scanning and otherwise connecting to Active Directory domains in Lansweeper.


Lansweeper supports using the LDAPS protocol for scanning and otherwise connecting to on-premises Active Directory domains. LDAPS communication is encrypted and therefore more secure than plain LDAP.

In Lansweeper Classic, you can choose per domain and per scan server which protocol you want to use for on-premises Active Directory connections, LDAP or LDAPS. You can also choose your preferred port. The LDAP(S) configuration you submit for a domain is used when connecting to that domain in the context of:

To configure LDAP(S) for an on-premises domain:

  1. Browse to the Scanning > Scanning Targets menu of the web console. If you have multiple scan servers, there will be a tab for each server.
    By default, in the LDAP(S) section of the page, only an All Domains configuration will be present. This configuration is used for LDAP(S) connections to any domains that don't have a domain-specific configuration. You can edit this configuration if you want.
    menu-scanning-scanning-targets.jpg
  2. Select Add Domain LDAP(S) Config to add a configuration for a specific domain.
  3. In the resulting pop-up, you can choose whether to use LDAP or LDAPS for connections to the domain, as well as the ports.
    Ports 389 and 636 are the default LDAP and LDAPS ports, respectively. For an LDAPS connection to your domain to be successful, make sure that LDAPS is properly configured in the domain itself and that the necessary certificates are present in the correct certificate stores of your Lansweeper scan server.
    ldaps-config.png For connections to your domain in the context of scanning and other operations, Lansweeper will try ports and protocols in this order until one is successful:
  • The LDAPS port of your domain-specific configuration, if you added a domain-specific configuration and if you ticked LDAPS for the configuration
  • The LDAP port of your domain-specific configuration, if LDAP is ticked
  • The LDAPS port of the All Domains configuration, if LDAPS is ticked
  • The LDAP port of the All Domains configuration, if LDAP is ticked
  • As a final fallback, LDAP over port 389

Was this post helpful? Select Yes or No below!
Did you have a similar issue and a different solution? Or did you not find the information you needed? Create a post in our Community Forum for your fellow IT Heroes!
More questions? Browse our Quick Tech Solutions.


Was this article helpful? Yes No
0% helpful (0/1)

New to Lansweeper?

Try Lansweeper For Free

Experience Lansweeper with your own data.
Sign up now for a 14-day free trial.

Try Now

New to Lansweeper?

Try Lansweeper For Free

Experience Lansweeper with your own data.
Sign up now for a 14-day free trial.

Try Now
Version history
Last update:
‎07-26-2023 05:37 PM
Updated by: