Detections
Analytics

Network security: Minimum session security for NTLM SSP based (including secure RPC) clients

Information

Network security: Minimum session security for NTLM SSP based (including secure RPC) clients

This security setting allows a client to require the negotiation of 128-bit encryption and/or NTLMv2 session security. These values are dependent on the LAN Manager Authentication Level security setting value. The options are:

Require NTLMv2 session security: The connection will fail if NTLMv2 protocol is not negotiated.
Require 128-bit encryption: The connection will fail if strong encryption (128-bit) is not negotiated.

Default: No requirements.

Solution

Policy Path: Security Options
Policy Setting Name: Network security: Minimum session security for NTLM SSP based (including secure RPC) clients

See Also

https://techcommunity.microsoft.com/blog/microsoft-security-baselines/windows-11-version-25h2-security-baseline/4456231

Item Details

Category: SYSTEM AND COMMUNICATIONS PROTECTION

References: 800-53|SC-8

Plugin: Windows

Control ID: 4c5db52a7cda6db1594c8fbd89dcd587ff38ecc75b2198bbb09f05836efb774e