Allow cryptography algorithms compatible with Windows NT 4.0

Supported OS tags: Windows10, Windows10RT, Windows11, Windows7, Windows8, Windows81, WindowsRT, WindowsRT81, WindowsServer2008, WindowsServer2012, WindowsServer2012R2, WindowsServer2016, WindowsVista

This policy setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Windows NT 4.0. The cryptography algorithms used in Windows NT 4.0 and earlier are not as secure as newer algorithms used in Windows 2000 or later, including this version of Windows. By default, Net Logon will not allow the older cryptography algorithms to be used and will not include them in the negotiation of cryptography algorithms. Therefore, computers running Windows NT 4.0 will not be able to establish a connection to this domain controller. If you enable this policy setting, Net Logon will allow the negotiation and use of older cryptography algorithms compatible with Windows NT 4.0. However, using the older algorithms represents a potential security risk. If you disable this policy setting, Net Logon will not allow the negotiation and use of older cryptography algorithms. If you do not configure this policy setting, Net Logon will not allow the negotiation and use of older cryptography algorithms.

This policy has no additional user input fields.

• Computer
  Contact PDC on logon failure

  At least Windows Server 2003 operating systems or Windows XP Professional
• Computer
  Log Enhanced Domain-wide NTLM Logs

  At least Windows 11 Version 24H2
• Computer
  Set Netlogon share compatibility

  At least Windows Server 2003
• Computer
  Set scavenge interval

  At least Windows Server 2003 operating systems or Windows XP Professional
• Computer
  Set SYSVOL share compatibility

  At least Windows Server 2003
• Computer
  Specify expected dial-up delay on logon

  At least Windows Server 2003 operating systems or Windows XP Professional
• Computer
  Specify log file debug output level

  At least Windows Server 2003