Expected Behavior
Following upgrade of Active Directory plugin to 2.12 (well, 2.11 or above), the TLS Configuration dropdown control should have migrated from the Configure Global Security page's Advanced group up to that of the individual Domain group/groups.
Current Behavior
On a Windows master the control has disappeared from the form entirely. See the screenshots attached, one of which shows our production Jenkins running a pre-2.11 version of the plugin, where the control still lives in the Advanced group. And one showing my local Jenkins running a post-2.11 version of the plugin. The underlying AD configuration is functionally identical.
Suspected Cause
It looks like the Stapler refactor under SECURITY-859 and 520faf5 moved the control up to the individual Domain group. But only when the master is running on Unix.