Solved

Windows 2012 Dynamic Access Control, What comptuer claim type supports domain membership?

Posted on 2014-12-03
1
298 Views
Last Modified: 2014-12-05
I like to limit access to share by AD domain membership so that only AD domain computer can access the share. What claim type is usually used for this ?

I was trying to use 'objectSID'  which contains domain SID, but in Clain Type to select, it doesn't exist.
0
Comment
Question by:crcsupport
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
1 Comment
 
LVL 81

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 40479393
Device claims are supported in Windows 8+ clients only.
Open Group Policy Management and navigate to Domain.
Right-click the Default Domain Controllers Policy and select Edit.
In the Group Policy Management Editor window, navigate to Computer Configuration, > Administrative Templates, System, and Kerberos.
Select Enable KDC support for claims, compound authentication, and Kerberos armoring.
Click OK. Close Group Policy Management.

http://bit.ly/15Pj4Ix
0

Featured Post

Why You Need a DevOps Toolchain

IT needs to deliver services with more agility and velocity. IT must roll out application features and innovations faster to keep up with customer demands, which is where a DevOps toolchain steps in. View the infographic to see why you need a DevOps toolchain.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A project that enables an administrator to perform actions within a user session context not just at the time of login but any time later on day(s) or week(s) later.
Determining the an SCCM package name from the Package ID
This tutorial will walk an individual through the process of installing the necessary services and then configuring a Windows Server 2012 system as an iSCSI target. To install the necessary roles, go to Server Manager, and select Add Roles and Featu…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

736 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question