ADMX Viewer
AddSystemHard.Policies.AddSystemHard• Machine

Disable WDigest protocol

Download ADMX

Enabling this policy will disable the WDigest protocol, now considered obsolete. Keeping WDigest enabled could allow an attacker to retrieve plain-text passwords stored in the LSA service with a tool such as Mimikatz, and it is therefore recommended to enable this policy.

Policy Details

Policy Name
WDigest
Registry Key
SYSTEM\CurrentControlSet\Control\SecurityProviders\WDigest
Supported On
At least Windows Vista
Available Languages
en-usfr-fr

Supported Values

Simple Enabled/Disabled toggle controlling whether the value exists under the configured registry key.