how I can add salt to the hashed passwords?

In short, this is not natively supported - so you'd need to implement a custom interface/app that your AD users will be somehow forced to use when they change or reset their passwords

If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

hth

Marcin

Hello,

Thank you for posting in Q&A forum.

Adding salt to hashed passwords in Active Directory (AD) is not directly supported or recommended due to the way AD manages passwords and authentication.

Adding salt requires modifying the hashing process, which may compromise the security of your AD environment. If you still want to add salt, you will need to implement a custom interface or application that your AD users will be forced to use when changing or resetting their passwords. However, this may introduce new security risks and challenges because you will be responsible for maintaining the security and integrity of this custom solution.

AD advocates for enhanced security through methods such as strong password policies and multi-factor authentication, rather than directly modifying AD's password hashing and storage mechanisms.

I hope the information above is helpful.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.