Group Policy SearchGroup Policy Search
English

HKLM\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters

0 subkeys · 12 Group Policy settings use this key

Group Policy settings that use this key

12 results

  1. Allow IP address-based SPNs during Kerberos authentication

    Value name: TryIPSPN REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  2. Allow retrieving the Azure AD Kerberos Ticket Granting Ticket during logon

    Value name: CloudKerberosTicketRetrievalEnabled REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  3. Always send compound authentication first

    Value name: AlwaysSendCompoundId REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  4. Configure hash algorithms for certificate logon

    Value name: PKInitHashAlgorithmConfigurationEnabled, PKInitSHA1, PKInitSHA256, PKInitSHA384, PKInitSHA512 4 elements Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  5. Disable revocation checking for the SSL certificate of KDC proxy servers

    Value name: NoRevocationCheck REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  6. Enable Delegated Managed Service Account logons

    Value name: DelegatedMSAEnabled, DmsaRealms 1 element Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  7. Fail authentication requests when Kerberos armoring is not available

    Value name: RequireFast REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  8. Kerberos client support for claims, compound authentication and Kerberos armoring

    Value name: EnableCbacAndArmor REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  9. Require strict KDC validation

    Value name: KdcValidation REG_DWORD · Enabled 2 · Disabled 0 Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  10. Require strict target SPN match on remote procedure calls

    Value name: StrictTargetContext REG_DWORD · Enabled 1 · Disabled 0 Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  11. Support device authentication using certificate

    Value name: DevicePKInitEnabled, DevicePKInitBehavior 1 element Computer Configuration › Administrative Templates › System › Kerberos Go to policy

  12. Use forest search order

    Value name: UseForestSearch, ForestSearchList 1 element Computer Configuration › Administrative Templates › System › Kerberos Go to policy

Other keys in Kerberos

View all of Kerberos