{"id":310,"date":"2022-01-31T12:26:05","date_gmt":"2022-01-31T12:26:05","guid":{"rendered":"https:\/\/virtualall.sk.website.tuke.sk\/?p=310"},"modified":"2026-09-11T14:45:50","modified_gmt":"2026-09-11T14:45:50","slug":"zabezpecenie-ad-server-vypnutim-moznosti-allownt4crypto","status":"publish","type":"post","link":"https:\/\/virtualall.sk\/en\/2022\/01\/zabezpecenie-ad-server-vypnutim-moznosti-allownt4crypto\/","title":{"rendered":"AD AllowNT4Crypto Security"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Syst\u00e9m Windows Server 2008 alebo nov\u0161\u00ed \u0161tandardne zakazuje klientom s opera\u010dn\u00fdmi syst\u00e9mami in\u00fdch ako Microsoft alebo opera\u010dn\u00fdmi syst\u00e9mami Windows NT 4.0 vytv\u00e1ra\u0165 zabezpe\u010den\u00e9 kan\u00e1ly pomocou slab\u00fdch kryptografick\u00fdch algoritmov v \u0161t\u00fdle Windows NT 4.0. Ak\u00e1ko\u013evek oper\u00e1cia z\u00e1visl\u00e1 od bezpe\u010dnostn\u00e9ho kan\u00e1la, ktor\u00e1 je iniciovan\u00e1 klientmi so star\u0161\u00edmi verziami opera\u010dn\u00e9ho syst\u00e9mu Windows alebo s opera\u010dn\u00fdmi syst\u00e9mami in\u00fdch v\u00fdrobcov ako Microsoft, ktor\u00e9 nepodporuj\u00fa siln\u00e9 kryptografick\u00e9 algoritmy, zlyh\u00e1 na radi\u010di dom\u00e9ny so syst\u00e9mom Windows Server 2008, Windows Server 2008 R2 alebo Windows Server 2012 s predvolen\u00fdmi nastaveniami. Windows Server 2008 R2 a nov\u0161\u00ed nepodporuj\u00fa vz\u0165ahy d\u00f4very so syst\u00e9mom Windows NT 4.0 ani pri pou\u017eit\u00ed nastavenia NT4Crypto. Toto obmedzenie zah\u0155\u0148a, ale nie je obmedzen\u00e9 na nasleduj\u00face oper\u00e1cie zabezpe\u010den\u00e9ho kan\u00e1la: &#8211; Vytvorenie a udr\u017eiavanie d\u00f4veryhodn\u00fdch vz\u0165ahov &#8211; Pripojenie k dom\u00e9ne &#8211; Autentifik\u00e1cia dom\u00e9ny &#8211; Rel\u00e1cie SMB<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Odpor\u00fa\u010dan\u00e9 nastavenia:<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Vypnutie NF4Crypto v registroch opera\u010dn\u00e9ho syst\u00e9mu:<\/p>\n\n\n\n<pre class=\"wp-block-code\"><code>Set-Itemproperty -path 'HKLM:\\SYSTEM\\CurrentControlSet\\Services\\Netlogon\\Parameters\\' -Name 'AllowNT4Crypto' -value '0'<\/code><\/pre>\n\n\n\n<p class=\"wp-block-paragraph\">Nastavenie GPO policy:<\/p>\n\n\n\n<ol class=\"wp-block-list\"><li>spustenie konzoly:<\/li><\/ol>\n\n\n\n<pre class=\"wp-block-code\"><code>gpmc.msc<\/code><\/pre>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"aligncenter size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"503\" src=\"https:\/\/virtualall.sk.website.tuke.sk\/wp-content\/uploads\/2022\/01\/GPO-set-1-1024x503.png\" alt=\"AD AllowNT4Crypto zabezpe\u010denie\" class=\"wp-image-350\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2022\/01\/GPO-set-1-1024x503.png 1024w, https:\/\/virtualall.sk\/wp-content\/uploads\/2022\/01\/GPO-set-1-300x147.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2022\/01\/GPO-set-1-768x377.png 768w, https:\/\/virtualall.sk\/wp-content\/uploads\/2022\/01\/GPO-set-1.png 1103w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Na polo\u017eku &#8220;Default Domain Controllers Policy&#8221; je potrebne klikn\u00fa\u0165 prav\u00fdm tla\u010didlom a zvoli\u0165 mo\u017enos\u0165 edit<\/p>\n\n\n\n<div class=\"wp-block-image\"><figure class=\"alignleft size-large\"><img loading=\"lazy\" decoding=\"async\" width=\"1024\" height=\"708\" src=\"https:\/\/virtualall.sk.website.tuke.sk\/wp-content\/uploads\/2022\/01\/GPO-set-2-1024x708.png\" alt=\"AD AllowNT4Crypto zabezpe\u010denie (2)\" class=\"wp-image-351\" srcset=\"https:\/\/virtualall.sk\/wp-content\/uploads\/2022\/01\/GPO-set-2-1024x708.png 1024w, https:\/\/virtualall.sk\/wp-content\/uploads\/2022\/01\/GPO-set-2-300x207.png 300w, https:\/\/virtualall.sk\/wp-content\/uploads\/2022\/01\/GPO-set-2-768x531.png 768w, https:\/\/virtualall.sk\/wp-content\/uploads\/2022\/01\/GPO-set-2.png 1235w\" sizes=\"auto, (max-width: 1024px) 100vw, 1024px\" \/><\/figure><\/div>\n\n\n\n<p class=\"wp-block-paragraph\">Polo\u017eku &#8220;Allow cryptography algorithms compatible with Windows NT 4.0&#8221; je potrebn\u00e9 nastavi\u0165 na vo\u013ebu Disabled<\/p>\n\n\n\n<hr class=\"wp-block-separator has-alpha-channel-opacity\"\/>\n\n\n\n<h2 class=\"wp-block-heading\">S\u00favisiace n\u00e1vody<\/h2>\n\n\n\n<ul class=\"wp-block-list\">\n\n<li><a href=\"https:\/\/virtualall.sk\/2022\/01\/instalacia-windows-activedirectory-2022\/\">In\u0161tal\u00e1cia Active Directory 2022<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2022\/01\/instalacia-windows-activedirectory-2022-cast-2\/\">In\u0161tal\u00e1cia Active Directory 2022 \u010das\u0165 2<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2022\/02\/active-directory-nastavenie-ntp-servera\/\">Active Directory NTP server<\/a><\/li>\n\n\n<li><a href=\"https:\/\/virtualall.sk\/2022\/01\/povolenie-replikacie-windows-dns-a-linux-dns\/\">Windows DNS a Linux DNS replik\u00e1cia<\/a><\/li>\n\n<\/ul>\n","protected":false},"excerpt":{"rendered":"<p>Syst\u00e9m Windows Server 2008 alebo nov\u0161\u00ed \u0161tandardne zakazuje klientom s opera\u010dn\u00fdmi syst\u00e9mami in\u00fdch ako Microsoft alebo opera\u010dn\u00fdmi syst\u00e9mami Windows NT 4.0 vytv\u00e1ra\u0165 zabezpe\u010den\u00e9 kan\u00e1ly pomocou slab\u00fdch kryptografick\u00fdch algoritmov v \u0161t\u00fdle Windows NT 4.0. Ak\u00e1ko\u013evek oper\u00e1cia z\u00e1visl\u00e1 od bezpe\u010dnostn\u00e9ho kan\u00e1la, ktor\u00e1 je iniciovan\u00e1 klientmi so star\u0161\u00edmi verziami opera\u010dn\u00e9ho syst\u00e9mu Windows alebo s opera\u010dn\u00fdmi syst\u00e9mami in\u00fdch v\u00fdrobcov&#8230;<\/p>\n<p class=\"more-link-wrap\"><a href=\"https:\/\/virtualall.sk\/en\/2022\/01\/zabezpecenie-ad-server-vypnutim-moznosti-allownt4crypto\/\" class=\"more-link\">Read More<span class=\"screen-reader-text\"> &ldquo;AD AllowNT4Crypto Security&rdquo;<\/span> &raquo;<\/a><\/p>\n","protected":false},"author":1,"featured_media":354,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[57],"tags":[60,59,62,82,76,81],"class_list":["post-310","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-activedirectory","tag-active-directory","tag-activedirectory","tag-ad","tag-ad-allownt4crypto","tag-ad-security","tag-allownt4crypto"],"_links":{"self":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/310","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/comments?post=310"}],"version-history":[{"count":12,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/310\/revisions"}],"predecessor-version":[{"id":2464,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/posts\/310\/revisions\/2464"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media\/354"}],"wp:attachment":[{"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/media?parent=310"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/categories?post=310"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/virtualall.sk\/en\/wp-json\/wp\/v2\/tags?post=310"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}