Additional Registry Keywords

The following AS/U Registry keywords were added after the last manual revision. Unless otherwise noted AS/U must be restarted for keyword changes to take effect.

The following keywords have been added to the Advanced Server Registry under the key:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services

[ Net Logon Service Parameters ]

RefusePasswordChange REG_DWORD 0 or 1

Specifies whether to disable the ability to accept machine account password changes. Machine account password changes normally occur weekly. Disabling automatic machine password changes reduces account replication occurrences and can reduce network traffic between primary and backup domain controllers.

Default: 0 (Password changes are allowed).

[ Lanman Server Parameters ]

NullSessionShares REG_MULTI_SZ List of shares

List of file shares the client is allowed to access by using the null session. If a share is not on this list, the request to access it will be denied. NullSessionShares is not updated automatically to the server if any changes are made; you must stop and re-start the server.

Default: None

EnableSecuritySignature REG_DWORD 0 or 1

Specifies whether SMB signing is enabled on the server. SMB signing provides mutual authentication which prevents man-in-the-middle attacks. SMB signing imposes a performance penalty on the system. Although it does not consume any additional network bandwidth, it does use more CPU cycles on the client and server side.

Default: 0

RequireSecuritySignature REG_DWORD 0 or 1

Specifies whether a server requires all of its clients to use SMB signing. If a client does not have security signatures enabled, it will not be able to connect to a server that requires security signatures.

Default: 0

[ Advanced Server Parameters ]

BigEndianLuidCompatibilityMode REG_DWORD 0 or 1

When the value of this keyword is set to 0, AS/U will return security privilege information to the client only in Intel byte order. If the value of this keyword is 1, then this information is returned in both Intel and big-endian byte orders. Setting this parameter to 1 allows Windows NT Version 3.51 clients to administer AS/U servers. Windows NT Version 4.0 or later clients can administer Advanced Server regardless of the setting of this keyword. The value of this keyword must be set to 0 in order to install Microsoft Exchange Server correctly on a Windows NT Version 4.0 Server that is a backup domain controller to an AS/U primary domain controller.

Default: 1

[ Browser Service Parameters ]

WinsServer REG_SZ Text string

If WINS is being utilized in an Advanced Server environment, the Computer Browser service queries the WINS server specified in this keyword for domain names to augment the browse list. The value of this keyword is an ASCII string containing the IP address or DNS name of the WINS server. The Computer Browser service must be restarted after changing the value of this keyword.

Default: None