Setting the encryption and signing of client and server data

[LarryG]

I had the following options on some of our servers set for encrypting
data 'always':

digitially encrypt or sign secure channel data

digitally sign communications
for client and server

We still had some machines (nt4) that could not operate in this type
of configuration. So I went into the local security policy and
disabled these settings. It appears that even though I reload the
local security policy it does not turn off these options, I have to
reboot. Does anyone know how to accomplish this without a reboot?

The server in question is a clustered file server, not sure if that
makes any difference...

Thx,

 

[Shawn Rabourn \(MS\)]

I have seen this apply without a reboot, however I have not seen it disable
without a reboot.

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.

 

[LarryG]

Shawn, Will I need to stop and restart the server service? Just
looking for a way to disable without booting the server...

 

[Shawn Rabourn \(MS\)]

I don't see why that wouldn't work. Remember all the services that
piggyback lanmanserver also will need to be restarted.

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.

 

[LarryG]

I don't see why that wouldn't work. Remember all the services that
piggyback lanmanserver also will need to be restarted.

--Shawn
This posting is provided "AS IS" with no warranties and confers no rights.

Shawn,
I restarted the workstation service which did not fix the
problem. I want to restart the server serice but all of the users will
be knocked off. So I have some maintenance scheduled for next weekend,
will wait til then to do the reboot.

Thx, I will let you know how it goes...