Domain controller: LDAP server signing
This setting doesn't require restart, changes are applied immediately: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/domain-controller-ldap-server-signing-requirements#restart-requirement
Domain controller: LDAP server channel binding
This setting doesn't require restart, changes are applied immediately: https://support.microsoft.com/en-us/topic/kb4034879-use-the-ldapenforcechannelbinding-registry-entry-to-make-ldap-authentication-over-ssl-tls-more-secure-e9ecfa27-5e57-8519-6ba3-d2c06b21812e