Solved Secpol.msc / Network security workaround

[mjf]

I'm using Home premium and apparently it doesn't support
secpol.msc

I need to the following apparently to get access to a usb port on a Thomson TG782T modem
"click the start button and type secpol.msc in the search function. Browse to "Local Policies" -> "Security Options". Now look for the entry "Network Security: LAN Manager authentication level" and open it. Click on the dropdown menu and select "Send LM & NTLM - use NTLMv2 session security if negotiated". Apply the settings."


Does anyone know if there is a work around?


I want to connect printers to this port and avoid using another PC as a server.

 

[TanyaC]

I'm using Home premium and apparently it doesn't support
secpol.msc

I need to the following apparently to get access to a usb port on a Thomson TG782T modem
"click the start button and type secpol.msc in the search function. Browse to "Local Policies" -> "Security Options". Now look for the entry "Network Security: LAN Manager authentication level" and open it. Click on the dropdown menu and select "Send LM & NTLM - use NTLMv2 session security if negotiated". Apply the settings."


Does anyone know if there is a work around?


I want to connect printers to this port and avoid using another PC as a server.

Hi. I can't guarantee this will work, because I have ultimate, and I don't use this feature. But, I changed it on my computer, and compared my registry before and after and found that setting the level you described changed one registry key.

Please make sure you back up your registry before doing this. I'd create a restore point.

Go into regedit and Navigate to

HKLM|System|CurrentControlSet|Control|LSA

If the key LMCompatabilityLevel is present, set it's value to 1.

If not present, add a new DWORD (32 bit value), and set its value to 0x1 (Hexadecimal 1).

Reboot. And see how you go. Test your system to see if changing this setting impacted other clients or services.

If this does not work, I'd return the registry to the way it was before.

When LM Authentication level is not defined the keyword is generally not present in the registry.

The values are;

0 = Send LM & NTLM responses
1 = Use NTLMv2 responses if negotiated
2 = Send NTLM response only
3 = Send NTLMv2 response only
4 = Send NTLMv2 response only. Refuse LM
5 = Send NTLMv2 response only. Refuse LM & NTLM

hth
Tanya

Edit: If your system has this setting already defined in the registry then it may have been set for a specific reason, and changing it might affect whatever was dependent on it.

 

[mjf]

Thanks Tanyam
I had made that change based on a couple of posts on other forums. Followed them blindly and it appeared to work. Your info confirms it and is a lot more solid - thanks.