How To: Enable NTLMv2 on WINPE

[Michael_W]

How to: Enable NTLMv2 on WINPE

Sometimes it´s a security requirement to enable NTLMv2 instead of the default LM & NTLM authentication. When you enable this setting, the authentication against servers will fail within WinPe. The account that your using will lockout in no time. To enable ntlmv2 in WinPE follow these steps.

First, refer to this page to find out what setting is appropriate for your environment.

http://www.microsoft.com/resources/documen...entry/76052.asp

Next, logon to the machine where you build your custom WinPE version. Open up regedit.exe. Select “Load Hive” from the menu and browse to the “I386\System32” directory. In there you will see a file named “setupreg.hiv”. Load it in your registry editor using a temporary name. Now browse to “HKEY_LOCAL_Machine\ControlSet001\Control\LSA”. Add a new DWORD, “LmCompatibilityLevel” and give it the value that suits your needs. Unload the temporary hive so that the date is written to disk.

Now when you boot WinPE it is capable to authenticate using NTLMv2

Hope this helps

Kind regards,

Michael Waterman