unexpected policy error while writing test user temporary random password for LDAP ⇨ LDAP Directories ⇨ default ⇨ LDAP Test User, error: javax.naming.OperationNotSupportedException: [LDAP: error code 53 - 0000052D: SvcErr: DSID-031A120C, problem 5003 (WILL_NOT_PERFORM), data 0 ]
Are you using LDAPS?
1. Not using TLS/LDAPS
2. User permissions/bind user permissions
3. Password not conforming to AD password policies
Since you checked TLS/LDAPS, Can you check the others? Are you sure your AD servers in PWM are registered like so: ldaps://dc.domain.com:636
I found that without specifying the port :636 that it would still use :389 for some operations so specifically adding the port resolved it.