ADMX Viewer
Google.Policies.Chrome• Both

Disable CNAME lookup when negotiating Kerberos authentication

Download ADMX

Setting the policy to Enabled skips CNAME lookup. The server name is used as entered when generating the Kerberos SPN. Setting the policy to Disabled or leaving it unset means CNAME lookup determines the canonical name of the server when generating the Kerberos SPN.

Policy Details

Policy Name
DisableAuthNegotiateCnameLookup
Registry Key
Software\Policies\Google\Chrome
Value Name
DisableAuthNegotiateCnameLookup
Supported On
Microsoft Windows 7 or later
Policy State Values
Enabled: 1
Disabled: 0