Network security: Minimum session security for NTLM SSP based (including secure RPC) clients

Information

Network security: Minimum session security for NTLM SSP based (including secure RPC) clients

This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are:

Require NTLMv2 session security: The connection will fail if NTLMv2 protocol is not negotiated.
Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated.

Default: No requirements.

Solution

Policy Path: Security Options
Policy Setting Name: Network security: Minimum session security for NTLM SSP based (including secure RPC) clients

See Also

https://blogs.technet.microsoft.com/secguide/2018/04/30/security-baseline-for-windows-10-april-2018-update-v1803-final/

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8, CSCv6|13

Plugin: Windows

Control ID: 500a9d37cd374c7d96a4e94c39eac86694f37828aef9072ebc96fa530dc0ef9e