On server 2003, "Domain Member:Digitally encrypt or sign secure channel data (always)" is greyed out

Posted on 2004-11-07
Last Modified: 2016-03-23
On server 2003, In security polcy settings, why is the eneble/disable choices greyed out under "Domain Member:Digitally encrypt or sign secure channel data (always)"
Question by:ambantin
    LVL 82

    Assisted Solution

    Because a group policy exists in your domain that defines this setting. You can run
    gpresult /scope computer
    and look for "The machine received security settings from the following GPOs" (or similar) on the machine to find out the name of possible GPOs where this settings is defined.

    Author Comment

    need more laymens terms

    Author Comment

    nvm... i am getting it
    LVL 15

    Accepted Solution

    "If this policy is disabled, then encryption and signing of all secure channel traffic is negotiated with the Domain Controller in which case the level of signing and encryption depends on the version of the Domain Controller and the settings of the following two policies:

        * Domain member: Digitally encrypt secure channel data (when possible)
        * Domain member: Digitally sign secure channel data (when possible)

    Default: Enabled."

    Quoted via MS


    Expert Comment


    where u r getting this ?

    in "Default Domain Controller Policy Editor" or in "Default Domain Policy" ?


    Featured Post

    How your wiki can always stay up-to-date

    Quip doubles as a “living” wiki and a project management tool that evolves with your organization. As you finish projects in Quip, the work remains, easily accessible to all team members, new and old.
    - Increase transparency
    - Onboard new hires faster
    - Access from mobile/offline

    Join & Write a Comment

    As a financial services provider, your business is impacted by two of the strictest federal regulations on record: the Sarbanes-Oxley Act and the Gramm-Leach-Bliley Act. Correctly implementing faxing into your organization to provide secure, real-ti…
    Container Orchestration platforms empower organizations to scale their apps at an exceptional rate. This is the reason numerous innovation-driven companies are moving apps to an appropriated datacenter wide platform that empowers them to scale at a …
    Sending a Secure fax is easy with eFax Corporate ( First, Just open a new email message.  In the To field, type your recipient's fax number You can even send a secure international fax — just include t…
    Illustrator's Shape Builder tool will let you combine shapes visually and interactively. This video shows the Mac version, but the tool works the same way in Windows. To follow along with this video, you can draw your own shapes or download the file…

    746 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    20 Experts available now in Live!

    Get 1:1 Help Now