GPO policy: "Configure RPC listener settings" — Kerberos enforcement sub-option, under Computer Configuration > Administrative Templates > Printers. Controls whether the print spooler enforces Kerberos authentication for incoming RPC connections instead of negotiating the protocol. Registry: HKLM\SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC:ForceKerberosForRpc (REG_DWORD). Reference: Policy CSP - Printers (ConfigureRpcListenerSettings)
Values
| Enum Value | Description |
|---|---|
|
|
Negotiate authentication protocol (registry value 0, default). The authentication protocol for incoming print RPC connections is negotiated between client and server. |
|
|
Force Kerberos authentication (registry value 1). Only Kerberos is accepted for incoming print spooler RPC connections. Requires all connecting clients to be domain-joined. |
Used by
ComputerAdministrativeTemplatestype: Computer-specific Administrative Templates (ADMX) settings on an Endpoint.
Example
Example
"NEGOTIATE"