Domain controller: LDAP server channel binding token requirements' is set to 'Always' (DC Only)

I am working on vulnerability issues related to the Domain Controller. The LDAP server channel binding token requirements were set to 'Always' (DC Only).

To analyze the issue, I changed the setting to 'When Supported' instead of 'Always'. Additionally, I enabled the following settings to generate more logs for auditing.

Via GPO:

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Domain controller: LDAP server channel binding token requirements – Set to 'When Supported'

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Network security: Restrict NTLM: Audit Incoming NTLM Traffic – Set to 'Enable auditing for all accounts'

Computer Configuration\Policies\Windows Settings\Security Settings\Local Policies\Security Options\Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers – Set to 'Audit all'

Manually set the following registry settings and rebooted the server:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NTDS\Diagnostics /v "16 LDAP Interface Events" /t REG_DWORD /d 2

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa\Kerberos\Parameters

• Value Name: LogLevel
• Value Type: REG_DWORD
  • Value: 1

However, none of the expected events (3039, 3040, 3041, 2886, 2887, 2888, 2889) are being generated.

Kindly advise. Thanks.