Discussion:
Setting LM and NTLM settings using Regedit
(too old to reply)
Aram Mirzadeh
2010-05-18 16:42:06 UTC
Permalink
Hi,

I'm having an issue sharing files between my three machines (there are
actually none windows machines as well using SMB share).

They all work with each other except "Windows 7" is misbehaving.
Everyone is prompted for a password to browse the 7 machine, and 7 is
asked for password when it tries to look at any other device.

This is obviously a "password encryption" thing that I have run into
before, but now I cannot seem to find a solution.

I have the following changes to Windows 7:

HKLM\SYSTEM\CurrentControlSet\Control\Lsa
LmCompatibilityLevel=1

Which I think is all I had to do with Vista and XP to get them to cooperate.

Since I don't have gpedit.msc, is there any other registery changes that
need to be made for this work?

Thank you.
Special Access
2010-05-19 01:31:37 UTC
Permalink
On Tue, 18 May 2010 12:42:06 -0400, Aram Mirzadeh
Post by Aram Mirzadeh
Hi,
I'm having an issue sharing files between my three machines (there are
actually none windows machines as well using SMB share).
They all work with each other except "Windows 7" is misbehaving.
Everyone is prompted for a password to browse the 7 machine, and 7 is
asked for password when it tries to look at any other device.
This is obviously a "password encryption" thing that I have run into
before, but now I cannot seem to find a solution.
HKLM\SYSTEM\CurrentControlSet\Control\Lsa
LmCompatibilityLevel=1
Which I think is all I had to do with Vista and XP to get them to cooperate.
Since I don't have gpedit.msc, is there any other registery changes that
need to be made for this work?
Thank you.
secpol.msc also has, under Security Options, Network Security: LAN
Manager Authentication Level ... which can make changes to the
setting.

registry: HKLM/System/CurrentControlSet\Control\LSA Look for the
"LMCompatibilityLevel" key.
0 = sent LM adn NTLM, never use NTLMv2
1 = use NTLMv2 if negitiated. LM, NTLM and LTLMv2 can be used
2 = send NTLM only.
3 = sent NTLMv2 only.
4 = Domain controllers refuse LM.
5 = Domain controllers refuse LM and NTLM.

good luck.

Mike
Aram Mirzadeh
2010-05-19 13:24:59 UTC
Permalink
Post by Special Access
On Tue, 18 May 2010 12:42:06 -0400, Aram Mirzadeh
Post by Aram Mirzadeh
Hi,
I'm having an issue sharing files between my three machines (there are
actually none windows machines as well using SMB share).
They all work with each other except "Windows 7" is misbehaving.
Everyone is prompted for a password to browse the 7 machine, and 7 is
asked for password when it tries to look at any other device.
This is obviously a "password encryption" thing that I have run into
before, but now I cannot seem to find a solution.
HKLM\SYSTEM\CurrentControlSet\Control\Lsa
LmCompatibilityLevel=1
Which I think is all I had to do with Vista and XP to get them to cooperate.
Since I don't have gpedit.msc, is there any other registery changes that
need to be made for this work?
Thank you.
secpol.msc also has, under Security Options, Network Security: LAN
Manager Authentication Level ... which can make changes to the
setting.
registry: HKLM/System/CurrentControlSet\Control\LSA Look for the
"LMCompatibilityLevel" key.
0 = sent LM adn NTLM, never use NTLMv2
1 = use NTLMv2 if negitiated. LM, NTLM and LTLMv2 can be used
2 = send NTLM only.
3 = sent NTLMv2 only.
4 = Domain controllers refuse LM.
5 = Domain controllers refuse LM and NTLM.
good luck.
Mike
It doesn't look like 7 "Home" has secpol.msc either. I tried setting
LmCompatiblityLevel to 0 and 1, neither seemed to work.

The only thing I notice is that LM vs Lm, but I don't think registry is
case sensative, but I'll try it.
Special Access
2010-05-20 01:46:31 UTC
Permalink
On Wed, 19 May 2010 09:24:59 -0400, Aram Mirzadeh
<***@hotmail.com> wrote:

<snip>
Post by Aram Mirzadeh
It doesn't look like 7 "Home" has secpol.msc either. I tried setting
LmCompatiblityLevel to 0 and 1, neither seemed to work.
The only thing I notice is that LM vs Lm, but I don't think registry is
case sensative, but I'll try it.
The keys are not normally case sensitive.

Look here
http://www.howtogeek.com/howto/windows-7/share-files-and-printers-between-windows-7-and-xp/
and maybe
http://www.sevenforums.com/network-sharing/5369-networking-file-share-between-windows-7-windows-xp.html
to see if this helps any at all as well...

Good luck!!

Loading...