Solved

Windows 2012 Dynamic Access Control, What comptuer claim type supports domain membership?

Posted on 2014-12-03
1
290 Views
Last Modified: 2014-12-05
I like to limit access to share by AD domain membership so that only AD domain computer can access the share. What claim type is usually used for this ?

I was trying to use 'objectSID'  which contains domain SID, but in Clain Type to select, it doesn't exist.
0
Comment
Question by:crcsupport
1 Comment
 
LVL 79

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 40479393
Device claims are supported in Windows 8+ clients only.
Open Group Policy Management and navigate to Domain.
Right-click the Default Domain Controllers Policy and select Edit.
In the Group Policy Management Editor window, navigate to Computer Configuration, > Administrative Templates, System, and Kerberos.
Select Enable KDC support for claims, compound authentication, and Kerberos armoring.
Click OK. Close Group Policy Management.

http://bit.ly/15Pj4Ix
0

Featured Post

NAS Cloud Backup Strategies

This article explains backup scenarios when using network storage. We review the so-called “3-2-1 strategy” and summarize the methods you can use to send NAS data to the cloud

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

While rebooting windows server 2003 server , it's showing "active directory rebuilding indices please wait" at startup. It took a little while for this process to complete and once we logged on not all the services were started so another reboot is …
How to record audio from input sources to your PC – connected devices, connected preamp to record vinyl discs, streaming media, that play through your audio card: Vista, Windows 7, Windows 8, Windows 8.1 and Windows 10 – both 32 bit & 64.
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…
Windows 10 is mostly good. However the one thing that annoys me is how many clicks you have to do to dial a VPN connection. You have to go to settings from the start menu, (2 clicks), Network and Internet (1 click), Click VPN (another click) then fi…

821 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question