Re: Removing the NTLM Hashes from the AD & SAM?

From: Bronek Kozicki (brok@rubikon.pl)
Date: 03/04/02 

From: "Bronek Kozicki" <brok@rubikon.pl>
To: "Parth Galen" <parth_galen@lycos.com>, <focus-ms@securityfocus.com>
Date: Mon, 4 Mar 2002 21:08:42 +0100

> HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
> Add new Key:
> Key Name: NoLMHash

> HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\Lsa
> Add Value:
> Value name: NoLMHash
> Data Type: REG_DWORD
> Radix: Decimal
> Value Data: 1
>
> Should there be a value set for the W2K and
> Windows NT version? Is the value and registry key

The difference is that on Win2K you need to create key (i.e.. "registry
folder"), while in WinXP you create value; seems that programmers changed
their mind from "lets make it new key" in Win2K to "value should be
sufficient" when coding WinXP. I believe that in Win2K you do not need to
add any specific value to the key created. Please also note, that this
feature should only be used on Win2K Service Pack 2 or later; there is no
such option on WinNT4.

Regards

B.