[Forgot Password]
Login  Register Subscribe

25354

 
 

132805

 
 

141151

 
 

909

 
 

114115

 
 

156

Paid content will be excluded from the download.


Download | Alert*
CCE
view XML

CCE-35834-1

Platform: win2012r2Date: (C)2015-10-08   (M)2020-03-10



Allow cryptography algorithms compatible with Windows NT 4.0 This setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Windows NT 4.0. The cryptography algorithms used in Windows NT 4.0 and earlier are not as secure as newer algorithms used in Windows 2000, Windows XP, Windows Server 2003, Windows Vista, and this version of Windows. By default, Net Logon will not allow the older cryptography algorithms to be used and will not include them in the negotiation of cryptography algorithms. Therefore, computers running Windows NT 4.0 will not be able to establish a connection to this domain controller. If this setting is enabled, Net Logon will allow the negotiation and use of older cryptography algorithms compatible with Windows NT 4.0. However, using the older algorithms represents a potential security risk.


Parameter:


Technical Mechanism: (1) GPO: Computer Configuration\Administrative Templates\System\Net Logon!Allow cryptography algorithms compatible with Windows NT 4.0 (2) REG: HKEY_LOCAL_MACHINE\Software\Policies\Microsoft\Netlogon\Parameters!AllowNT4Crypto

References:

Resource IdReference
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27139
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27139
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27139
SCAP Repo OVAL Definitionoval:org.secpod.oval:def:27139


OVAL    1
oval:org.secpod.oval:def:27139

© SecPod Technologies