| 1 | Windows Registry Editor Version 5.00
|
|---|
| 2 | ;
|
|---|
| 3 | ; windows10_join_enable.reg
|
|---|
| 4 | ;
|
|---|
| 5 | ; This registry keys are needed for a Windows 10 Client to join
|
|---|
| 6 | ; and logon to a Samba 4.3.x domain.
|
|---|
| 7 | ;
|
|---|
| 8 | [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\LanmanWorkstation\Parameters]
|
|---|
| 9 | ; Enable NT-Domain compatibility mode
|
|---|
| 10 | ; Default:
|
|---|
| 11 | ; [value not present]
|
|---|
| 12 | ; "DomainCompatibilityMode"=-
|
|---|
| 13 | "DomainCompatibilityMode"=dword:00000001
|
|---|
| 14 |
|
|---|
| 15 | ; Disable required DNS name resolution
|
|---|
| 16 | ; Default:
|
|---|
| 17 | ; [value not present]
|
|---|
| 18 | ; "DNSNameResolutionRequired"=-
|
|---|
| 19 | "DNSNameResolutionRequired"=dword:00000000
|
|---|
| 20 |
|
|---|
| 21 | ; Disable Mutual authentication, no Kerberos, can fall back to NTLMv2
|
|---|
| 22 | ; Disable Integrity, SMB signing is not required
|
|---|
| 23 | ; Disable Privacy, no SMBv3 must be used
|
|---|
| 24 | ; Default:
|
|---|
| 25 | ; [value not present]
|
|---|
| 26 | ; "\\\\*\\netlogon"=-
|
|---|
| 27 |
|
|---|
| 28 | [HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkProvider\HardenedPaths]
|
|---|
| 29 | "\\\\*\\netlogon"="RequireMutualAuthentication=0,RequireIntegrity=0,RequirePrivacy=0"
|
|---|
