Policy
Disable CNAME lookup when negotiating Kerberos authentication
Microsoft Edge
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows7
Determines whether the generated Kerberos SPN is based on the canonical DNS name (CNAME) or on the original name entered. If you enable this policy, CNAME lookup is skipped and the server name (as entered) is used. If you disable this policy or don't configure it, the canonical name of the server is used. This is determined through CNAME lookup.
Internal name
DisableAuthNegotiateCnameLookup
Policy ID
6b34639f5767
Elements
0
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
Path Software\Policies\Microsoft\Edge Value name DisableAuthNegotiateCnameLookup | REG_DWORD | HKLM 1 HKCU 1 | HKLM 0 HKCU 0 |
Registry location
Path
Software\Policies\Microsoft\Edge
Value name
DisableAuthNegotiateCnameLookup
Hive
HKLM
Enabled value
1
Disabled value
0
Hive
HKCU
Enabled value
1
Disabled value
0
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.