Policy
Allow IP address-based SPNs during Kerberos authentication
Microsoft Windows
Policy overview
Key metadata and intent for this policy.
Supported OS tags: Windows11
This policy setting allows you to configure Kerberos to use IP address-based service principal names (SPNs). If you enable this policy setting, the Kerberos client will attempt to use IP address-based SPNs when connecting to a service. If you disable or do not configure this policy setting, Kerberos will not attempt to use IP address-based SPNs.
Internal name
EnableTryIPSPN
Policy ID
205662c2b75f
Elements
0
Registry values
How enabled and disabled states update the registry.
| Scope | Registry location | Type | Enabled value | Disabled value | Copy |
|---|---|---|---|---|---|
| Computer | Path Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters Value name TryIPSPN | REG_DWORD | HKLM 1 | HKLM 0 |
Registry location
Path
Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters
Value name
TryIPSPN
Hive
HKLM
Enabled value
1
Disabled value
0
Policy elements
Inputs and configuration options exposed by this policy.
This policy has no additional user input fields.