Microsoft.Policies.Edge• Both
Disable CNAME lookup when negotiating Kerberos authentication
Determines whether the generated Kerberos SPN is based on the canonical DNS name (CNAME) or on the original name entered. If you enable this policy, CNAME lookup is skipped and the server name (as entered) is used. If you disable this policy or don't configure it, the canonical name of the server is used. This is determined through CNAME lookup.
Policy Details
- Policy Name
- DisableAuthNegotiateCnameLookup
- Registry Key
- Software\Policies\Microsoft\Edge
- Value Name
- DisableAuthNegotiateCnameLookup
- Supported On
- Microsoft Edge version 77, Windows 7 or later
- Policy State Values
- Enabled: 1Disabled: 0
- Available Languages
- en-us