ADMX Viewer
Microsoft.Policies.NetLogon• Machine

Allow cryptography algorithms compatible with Windows NT 4.0

This policy setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Windows NT 4.0. The cryptography algorithms used in Windows NT 4.0 and earlier are not as secure as newer algorithms used in Windows 2000 or later, including this version of Windows. By default, Net Logon will not allow the older cryptography algorithms to be used and will not include them in the negotiation of cryptography algorithms. Therefore, computers running Windows NT 4.0 will not be able to establish a connection to this domain controller. If you enable this policy setting, Net Logon will allow the negotiation and use of older cryptography algorithms compatible with Windows NT 4.0. However, using the older algorithms represents a potential security risk. If you disable this policy setting, Net Logon will not allow the negotiation and use of older cryptography algorithms. If you do not configure this policy setting, Net Logon will not allow the negotiation and use of older cryptography algorithms.

Policy Details

Policy Name
Netlogon_AllowNT4Crypto
Registry Key
Software\Policies\Microsoft\Netlogon\Parameters
Value Name
AllowNT4Crypto
Supported On
At least Windows Vista
OMA-URI (CSP)
ADMX_Netlogon/Netlogon_AllowNT4Crypto
OS Build Version:10.0.22000, 10.0.19043.1202, 10.0.19042.1202, 10.0.19041.1202
CSP Version:10.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationHolographic BusinessPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Policy State Values
Enabled: 1
Disabled: 0
Available Languages
en-us