Domain member: Require strong (Windows 2000 or later) session key This security setting determines whether 128-bit key strength ...

Domain member: Require strong (Windows 2000 or later) session key

This security setting determines whether 128-bit key strength is required for encrypted secure channel data.

When a computer joins a domain, a computer account is created. After that, when the system starts, it uses the computer account password to create a secure channel with a domain controller within the domain. This secure channel is used to perform operations such as NTLM pass-through authentication, LSA SID/name Lookup, and so on.

Depending on what version of Windows is running on the domain controller that the domain member is communicating with and the settings of the parameters:

Domain member: Digitally encrypt or sign secure channel data (always)
Domain member: Digitally encrypt secure channel data (when possible)
Some or all of the information that is transmitted over the secure channel will be encrypted. This policy setting determines whether or not 128-bit key strength is required for the secure channel information that is encrypted.

If this setting is enabled, then the secure channel will not be established unless 128-bit encryption can be performed. If this setting is disabled, then the key strength is negotiated with the domain controller.

Default: Enabled.

Important

In order to take advantage of this policy on member workstations and servers, all domain controllers that constitute the member's domain must be running Windows 2000 or later.
In order to take advantage of this policy on domain controllers, all domain controllers in the same domain as well as all trusted domains must run Windows 2000 or later.

Domain member: Digitally encrypt secure channel data (when possible) This security setting determines whether a domain member ... Domain member: Digitally sign secure channel data (when possible) This security setting determines whether a domain member ... Domain member: Disable machine account password changes Determines whether a domain member periodically changes its computer ... Domain member: Maximum machine account password age This security setting determines how often a domain member will attempt ... Domain member: Require strong (Windows 2000 or later) session key This security setting determines whether 128-bit key strength ... Domain networks are configured by your system administrator and their locations cannot be changed to Private. You must manually ... Domain Policy Changed: %1 modified Domain Name: %2 Domain ID: %3 Caller User Name: %4 Caller Domain: %5 Caller Logon ID: ... Domain Policy was changed. Change Type: %1 modified Subject: Security ID: %4 Account Name: %5 Account Domain: %6 Logon ID: ... Domain-joined computers can't create homegroups or share content with a homegroup. Domain-joined computers can join existing ...