SecurityPolicyDsc icon indicating copy to clipboard operation
SecurityPolicyDsc copied to clipboard

Configure encryption types allowed or Kerberos

Open mgreenegit opened this issue 4 years ago • 0 comments

Discovered that multiple values can be selected for this setting, and when that occurs the combinations of all values would have to be mapped in to the PSD1, or we handle this by not trying to map to text names, or somehow support both formats.

"Confiugure_encryption_types_allowed_for_Kerberos" = @{
        Value   = "MACHINE\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters\SupportedEncryptionTypes"
        Section = 'Registry Values'
        Option  = @{
            String = '4,' # + <Numeric string representing the combination of selected encryption types>
        }
    }

mgreenegit avatar Aug 05 '21 15:08 mgreenegit