Every Active Directory forest and domain should have LDAPS implemented, but in very few cases it is actually done. The topic can be intimidating because it involves certificates, but once you understand some basic concepts, it's easier to tame than it seems. Let's see how to implement it!