Disable CNAME lookup when negotiating Kerberos authentication

Policy ID: DisableAuthNegotiateCnameLookup
Scope: Computer Configuration, User Configuration
Supported on: Microsoft Windows 7 or later
Source: Google Chrome Policy Templates (version 156.0.8078.80)
Category: Google › Google Chrome › HTTP authentication

Description

Setting the policy to Enabled skips CNAME lookup. The server name is used as entered when generating the Kerberos SPN.

Setting the policy to Disabled or leaving it unset means CNAME lookup determines the canonical name of the server when generating the Kerberos SPN.

Registry

ComputerHKEY_LOCAL_MACHINE

HKLM\Software\Policies\Google\Chrome View registry values

DisableAuthNegotiateCnameLookupREG_DWORD

UserHKEY_CURRENT_USER

HKCU\Software\Policies\Google\Chrome View registry values

DisableAuthNegotiateCnameLookupREG_DWORD

Other policies in the same category

View all policies in this category (8)