I want to Require strong (Windows 2000 or later) session key on my domain controllers

Posted on 2009-12-29
Medium Priority
Last Modified: 2012-05-08
Domain member: Require strong (Windows 2000 or later) session key , I want to ENABLE this on my DOMAIN CONTROLLERS , the functional level of the domain is "windows server 2003", how can I test this to make sure I dont break stuff ???
Question by:kaos_theory
  • 2
LVL 27

Accepted Solution

Jason Watkins earned 1000 total points
ID: 26139760

Unless you have a test domain, which parallels your production domain, you can either try this on your production domain or use Resultant Set of Policy in planning mode to forecast projected group policy changes.

Make the change; http://technet.microsoft.com/en-us/library/cc758041%28WS.10%29.aspx

Use RSoP to forecast; http://technet.microsoft.com/en-us/library/cc737327%28WS.10%29.aspx

Assisted Solution

hshao earned 1000 total points
ID: 26146212
Windows 2000 and later Windows system uses 128-bit encryption. And this is the default setting.

If you do not have any domain member that is pre-Windows 2000, such as Windows 98, etc, then this policy can be enabled. For security Microsoft actually suggest this setting to be enabled if there is no legacy system used.  If however communications to other operating systems are required, this setting should be disabled.

Hope this helps!

Author Comment

ID: 26162307
is there a excact link on MS site for this recomendtion ?

LVL 27

Expert Comment

by:Jason Watkins
ID: 26162351

Featured Post

Concerto Cloud for Software Providers & ISVs

Can Concerto Cloud Services help you focus on evolving your application offerings, while delivering the best cloud experience to your customers? From DevOps to revenue models and customer support, the answer is yes!

Learn how Concerto can help you.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Citrix XenApp, Internet Explorer 11 set to Enterprise Mode and using central hosted sites.xml file.
It’s been over a month into 2017, and there is already a sophisticated Gmail phishing email making it rounds. New techniques and tactics, have given hackers a way to authentically impersonate your contacts.How it Works The attack works by targeti…
This video Micro Tutorial explains how to clone a hard drive using a commercial software product for Windows systems called Casper from Future Systems Solutions (FSS). Cloning makes an exact, complete copy of one hard disk drive (HDD) onto another d…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Suggested Courses

850 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question