Re: Encryption through Group Policies

From: D. Cross [MS] (dcross_at_online.microsoft.com)
Date: 05/29/03


Date: Thu, 29 May 2003 08:40:49 -0700


If you want to use SSL/TLS, yes you need a CA to issue x.509 certificates.
If you are referring to SMB and signed communications with the domain, these
do not use certificates, they use Kerberos (symmetric signing).

-- 
David B. Cross [MS]
--
This posting is provided "AS IS" with no warranties, and confers no rights.
"Brett" <bbisbe@e-paradise.net> wrote in message
news:562cfe81.0305290712.1ee9e961@posting.google.com...
> There are alot of settings in the Security Settings portion of a Group
> Policy that relate to requireing Digital Signatures and using
> Encryption like SSL and TLS or 128 bit encryption.
>
> My question:
>
> Do you need some third party app or a CA to using the SSL encryption
> options in the Group Policy settings? The settings I am speaking of
> are internal Client Server communications, nothing related to the web.


Relevant Pages

  • File Encryption
    ... encryption and I was wondering if someone here could help ... certificates, I was slightly worried about what to do. ... recover my windows instead of a fresh install. ... they too appeared with some correct settings like ...
    (microsoft.public.windowsxp.security_admin)
  • Re: HELP ME, Please?
    ... Have you checked the encryption settings of your VPN connection? ... >> The following link speaks about setting up certificates for L2TP ...
    (microsoft.public.win2000.ras_routing)
  • Re: Unix Services / Default Permissions / WinXP_Pro
    ... File encryption can lead to a whole bunch of problems if not ... >> and configuration settings and completely reinstall the operating system ... >> Sitter, Net Nanny, or the Windows Shared Computer Toolkit to restrict the ...
    (microsoft.public.security)
  • RE: IIS Problems
    ... As with everything I know far more about IIS, RWW and OWA as a result of the ... The best way to verify the correct settings on the default website is to ... first edit button: ... ignore client certificates selected ...
    (microsoft.public.windows.server.sbs)
  • Re: Disadvantages to peristing replication settings as text?
    ... I'd actually have the mobile app include a "settings" ... in the registry. ... derived the encryption algorithm. ...
    (microsoft.public.sqlserver.ce)