SecurityPolicyDsc
SecurityPolicyDsc copied to clipboard
Configure encryption types allowed or Kerberos
Discovered that multiple values can be selected for this setting, and when that occurs the combinations of all values would have to be mapped in to the PSD1, or we handle this by not trying to map to text names, or somehow support both formats.
"Confiugure_encryption_types_allowed_for_Kerberos" = @{
Value = "MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters\SupportedEncryptionTypes"
Section = 'Registry Values'
Option = @{
String = '4,' # + <Numeric string representing the combination of selected encryption types>
}
}