Endpoint configuration · GraphQL enum

IncomingNTLMTrafficAuditing enum

GPO policy: "Network security: Restrict NTLM: Audit Incoming NTLM Traffic" under Computer Configuration > Policies > Windows Settings > Security Settings > Local Policies > Security Options. Registry: HKLM\SYSTEM\CurrentControlSet\Control\Lsa\MSV1_0:AuditReceivingNTLMTraffic (REG_DWORD). Reference: Network security: Restrict NTLM: Audit incoming NTLM traffic

Values

Enum Value Description

DISABLED

 Incoming NTLM traffic is not audited.

AUDIT_DOMAIN_ACCOUNTS

 Audit incoming NTLM pass-through authentication for domain accounts.

AUDIT_ALL_ACCOUNTS

 Audit incoming NTLM traffic for all accounts.

Used by

  • NetworkSecurityPolicy type: Controls local security authority, Kerberos, and NTLM parameters for network authentication and encryption policies on Windows.

Example

Example

"DISABLED"