Cname - SMB Signing - DisableStrictNameChecking

[sthf]

Hi

I have heard that it is not good Idea to add this to the
registry of server:

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Lanman
Server\Parameters

3.On the Edit menu, click Add Value, and then add
the following
registry value:

Value name: DisableStrictNameChecking
Data type: REG_DWORD
Radix: Decimal
Value: 1

4.Quit Registry Editor.

If you are using SMB signing, Is that correct, if so why?

Does it do some harm to use this in registry of servers
(2000 and 2003).

 

[Marc Reynolds [MSFT]]

Hi,

I am not aware of any issues with this. It is documented here:

281308 Connecting to SMB Share on a Windows 2000-Based Server May Not Work
with
http://support.microsoft.com/?id=281308

Thanks,
Marc Reynolds
Microsoft Technical Support

This posting is provided "AS IS" with no warranties, and confers no rights.
--------------------

 

[rory plaire]

Greetings,

It isn't a bad idea, per say, but there are some implementation
problems. For one, if a system uses a CNAME to access a share under the
SYSTEM account, then the access attempt fails. This causes things like
share access in startup scripts and Application Managment to fail. I
suppose it is something with the way that the security tokens for
client and server are validated...
Marc, do you know how to log a bug on this?

thanks,
-rory