Microsoft_Press_ebook_Introducing_Windows_Server_2012_R2_PDF.pdf

Note for a domain controller to request compound

This preview shows page 159 - 161 out of 242 pages.

NOTE For a domain controller to request compound authentication, the policies “KDC support for claims, compound authentication, and Kerberos armoring” and “Request compound authentication” must be configured and enabled in the resource account domain.
Image of page 159

Subscribe to view the full document.

148 CHAPTER 7 Group Policy Restrict delegation of credentials to remote servers This policy setting is used to configure restricted mode. It is located at: Computer Configuration\System\Credentials Delegation When running in restricted mode, participating apps do not expose credentials to remote computers (regardless of the delegation method). Restricted mode may limit access to resources located on other servers or networks beyond the target computer because credentials are not delegated. Participating apps include Remote Desktop Client. If you enable this policy setting, restricted mode is enforced and participating apps will not delegate credentials to remote computers. If you disable or do not configure this policy setting, restricted mode is not enforced and participating apps can delegate credentials to remote computers. NOTE To disable most credential delegation, it may be sufficient to deny delegation in Credential Security Support Provider (CredSSP) by modifying Administrative template settings (located at Computer Configuration\Administrative Templates\System\Credentials Delegation). Logon scripts There is one new Group Policy setting that can be used to configure the behavior of how logon scripts are processed in your environment. This new policy setting applies only to computers running Windows Server 2012 R2, Windows 8.1, or Windows RT 8.1. Configure Logon Script Delay This policy setting allows you to configure how long the Group Policy client waits after logon before running scripts. It is located at: Computer Configuration\System\Group Policy By default, the Group Policy client waits five minutes before running logon scripts. This helps create a responsive desktop environment by preventing disk contention. If you enable this policy setting, Group Policy will wait for the specified amount of time before running logon scripts. If you disable this policy setting, Group Policy will run scripts immediately after logon. If you do not configure this policy setting, Group Policy will wait five minutes before running logon scripts. Enter “0” to disable Logon Script Delay.
Image of page 160
New policy settings CHAPTER 7 149 Windows Update There is one new Group Policy setting that can be used to configure the behavior of how Windows Update works in your environment. This new policy setting applies only to computers running Windows Server 2012 R2, Windows 8.1, or Windows RT 8.1. Do not connect to any Windows Update Internet locations This policy setting is located at: Computer Configuration\Windows Components\Windows Update Enabling this policy will disable that functionality and may cause connection to public services such as the Windows Store to stop working.
Image of page 161
You've reached the end of this preview.
  • Spring '16

{[ snackBarMessage ]}

What students are saying

  • Left Quote Icon

    As a current student on this bumpy collegiate pathway, I stumbled upon Course Hero, where I can find study resources for nearly all my courses, get online help from tutors 24/7, and even share my old projects, papers, and lecture notes with other students.

    Student Picture

    Kiran Temple University Fox School of Business ‘17, Course Hero Intern

  • Left Quote Icon

    I cannot even describe how much Course Hero helped me this summer. It’s truly become something I can always rely on and help me. In the end, I was not only able to survive summer classes, but I was able to thrive thanks to Course Hero.

    Student Picture

    Dana University of Pennsylvania ‘17, Course Hero Intern

  • Left Quote Icon

    The ability to access any university’s resources through Course Hero proved invaluable in my case. I was behind on Tulane coursework and actually used UCLA’s materials to help me move forward and get everything together on time.

    Student Picture

    Jill Tulane University ‘16, Course Hero Intern