Allow Cryptography Algorithms Compatible With Windows NT 4.0 – Installing AD

IT Support Forum Forums Active Directory Installation Allow Cryptography Algorithms Compatible With Windows NT 4.0 – Installing AD

This topic contains 0 replies, has 1 voice, and was last updated by  Webmaster 10 months, 3 weeks ago.

  • Author
    Posts
  • #1611

    Webmaster
    Keymaster

    When installing Active Directory on a Windows Server 2012 R2 machine, you get this warning:

    Windows Server 2012 R2 domain controllers have a default for the security setting named “Allow cryptography algorithms compatible with Windows NT 4.0” that prevents weaker cryptography algorithms when establishing security channel sessions.

    For more information about this setting, see Knowledge Base article 942564…

    It is safe to ignore this warning, but if you want to increase the security of your AD environment you can go into group policy and disable Allow cryptography algorithms compatible with Windows NT 4.0. Doing so may cause issues communicating with Windows Server 2003 and prior operating systems.

You must be logged in to reply to this topic.