netwrix / pingcastle

PingCastle - Get Active Directory Security at 80% in 20% of the time
https://www.pingcastle.com
Other
2.35k stars 292 forks source link

Add descriptive text and fix colour for MSV1_0\RestrictSendingNTLMTraffic #212

Closed ralish closed 10 months ago

ralish commented 10 months ago

In the GPO -> Security settings section, if the "_MSV10\RestrictSendingNTLMTraffic" setting is enabled the value column shows "Enabled" in red instead of green, which seems to be incorrect as restricting (i.e. disabling) outbound NTLM traffic is the secure setting.

The text itself should also probably be changed to something more descriptive. The setting name in the policy editor is:

Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers

Relevant hyperlink: https://learn.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-restrict-ntlm-outgoing-ntlm-traffic-to-remote-servers

vletoux commented 10 months ago

fix for next version