LSA Protected Mode is an optional security feature which is described here.
Is this feature supported by Active Roles?
LSA Protected Mode is not currently a part of the test configuration of the Active Roles solution and as such is not fully supported.
Enhancement Request ID 125828 has been created to possibly include this functionality in a future release of Active Roles.
Specifically when using the Active Roles Synchronization Service or Quick Connect Capture Agent component, enabling LSA Protected Mode on an Active Directory Domain Controller is known to cause conflicts and to prevent real-time synchronization of password changes.
An enhancement request has been created to integrate this functionality into Active Roles.Product Management will evaluate the request and this feature may become available in a future release of the product.
There are no guarantees that this specific enhancement request will be implemented in a future release. For more information regarding our Enhancement Request policy, refer to our Global Support Guide on the Support Portal at: https://support.oneidentity.com/essentials/support-guide/