Disable CNAME lookup when negotiating Kerberos authentication
- Policy ID
- DisableAuthNegotiateCnameLookup
- Scope
- Computer Configuration, User Configuration
- Supported on
- Microsoft Edge version 77, Windows 7 or later
- Source
- Microsoft Edge Policy Templates (version 155.0.4283.45)
- Category
- Microsoft Edge › HTTP authentication
Description
Determines whether the generated Kerberos SPN is based on the canonical DNS name (CNAME) or on the original name entered.
If you enable this policy, CNAME lookup is skipped and the server name (as entered) is used.
If you disable this policy or don't configure it, the canonical name of the server is used. This is determined through CNAME lookup.
Registry
ComputerHKEY_LOCAL_MACHINE
- DisableAuthNegotiateCnameLookupREG_DWORD
UserHKEY_CURRENT_USER
- DisableAuthNegotiateCnameLookupREG_DWORD