I want to Require strong (Windows 2000 or later) session key on my domain controllers

Posted on 2009-12-29
Last Modified: 2012-05-08
Domain member: Require strong (Windows 2000 or later) session key , I want to ENABLE this on my DOMAIN CONTROLLERS , the functional level of the domain is "windows server 2003", how can I test this to make sure I dont break stuff ???
Question by:kaos_theory
    LVL 27

    Accepted Solution


    Unless you have a test domain, which parallels your production domain, you can either try this on your production domain or use Resultant Set of Policy in planning mode to forecast projected group policy changes.

    Make the change;

    Use RSoP to forecast;
    LVL 4

    Assisted Solution

    Windows 2000 and later Windows system uses 128-bit encryption. And this is the default setting.

    If you do not have any domain member that is pre-Windows 2000, such as Windows 98, etc, then this policy can be enabled. For security Microsoft actually suggest this setting to be enabled if there is no legacy system used.  If however communications to other operating systems are required, this setting should be disabled.

    Hope this helps!
    LVL 2

    Author Comment

    is there a excact link on MS site for this recomendtion ?

    LVL 27

    Expert Comment

    by:Jason Watkins

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Enabling OSINT in Activity Based Intelligence

    Activity based intelligence (ABI) requires access to all available sources of data. Recorded Future allows analysts to observe structured data on the open, deep, and dark web.

    A quick step-by-step overview of installing and configuring Carbonite Server Backup.
    Know what services you can and cannot, should and should not combine on your server.
    Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
    With the advent of Windows 10, Microsoft is pushing a Get Windows 10 icon into the notification area (system tray) of qualifying computers. There are many reasons for wanting to remove this icon. This two-part Experts Exchange video Micro Tutorial s…

    759 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    10 Experts available now in Live!

    Get 1:1 Help Now