[German]How to assure, that authentication at network level is on in Windows, if no Group Policies are available (for instance in all Windows Home editions)? Here is a short advise.
Advertising
In the days of a new network flaw discovered (see Critical update for Windows XP up to Windows 7 (May 2019)) users should ensure, that authentication is enabled at network level. This can be established also, if a Windows machine doesn't support group policies (which requires Windows Pro or Enterprise). SwiftOnSecurity has an advice on Twitter.
How to assure Network Level Authentication is on, without Group Policy.
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Terminal Services
Value: UserAuthentication
Data: 1HKLM\SYSTEM\CurrentControlSet\Control\Terminal Server\WinStations\RDP-Tcp\
Value: UserAuthentication
Data: 1— SwiftOnSecurity (@SwiftOnSecurity) 24. Mai 2019
Translated for the Noobs: Just fire up Registry editor regedit.exe via Run as administrator, navigate to to the two Registry-Keys mentioned above and add the DWORD value UserAuthentication set to 1. HKLM stands for HKey_Local_Machine. A 2nd advice may be found here. (Thx @PhantomofMobile)
Advertising
