Configure to Allow InSecure NETLOGON
For some users, the domain controller does not support AES for NETLOGON, which results in an insecure NETLOGON channel.To prevent this, the Windows Join Domain dialog provides an explicit option to control this behavior. By default, the checkbox remains unselected.
Configure Insecure NETLOGON
- Select Configuration | Appliances.
- On the appliances tree, select the appliance you want to join and click Windows Domain Memberhship.
A list of domains appears on the settings pane. It is initially empty. - Click Join to enter a domain into the list.
The Join Domain window opens. - Configure a domain name, a domain controller, and other settings in the window.
- Select Allow Insecure Netlogon option to allow the Insecure NETLOGON Channel for backward compatibility with the Windows Domain controller until security hardening is enforced

- Click OK.
Tip: After an upgrade, remove existing Windows domain memberships and rejoin the domains for the Allow insecure logon checkbox to take effect.
