[cifs-protocol] [REG:120082121001591] MS-NRPC FullSecureChannelProtection

[Jeff McCashland]

Hi Stefan,

I have filed a request to update the document. I'll follow up with the content team. 

Let us know if you find anything else. 

Best regards,
Jeff McCashland | Senior Escalation Engineer | Microsoft Protocol Open Specifications Team 
Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada)
Local country phone number found here: http://support.microsoft.com/globalenglish | Extension 1138300
We value your feedback.  My manager is Natesha Morrison (namorri), +1 (704) 430-4292

-----Original Message-----
From: Jeff McCashland <jeffm at microsoft.com> 
Sent: Friday, August 21, 2020 9:44 AM
To: Stefan Metzmacher <metze at samba.org>; cifs-protocol at lists.samba.org
Cc: support <support at mail.support.microsoft.com>
Subject: [REG:120082121001591] MS-NRPC FullSecureChannelProtection

[DocHelp to BCC, support on CC, SR ID on Subject]

Hello Stefan,

Thank you for sending in your question. While we normally only document out-of-box behavior, we'll investigate to see if a product behavior note is needed. We have created SR 120082121001591 to track this issue.

I'll research the registry setting, and let you know what I find.

Best regards,
Jeff McCashland | Senior Escalation Engineer | Microsoft Protocol Open Specifications Team
Phone: +1 (425) 703-8300 x38300 | Hours: 9am-5pm | Time zone: (UTC-08:00) Pacific Time (US and Canada) Local country phone number found here: https://nam06.safelinks.protection.outlook.com/?url=http%3A%2F%2Fsupport.microsoft.com%2Fglobalenglish&data=02%7C01%7Cjeffm%40microsoft.com%7C18c702395c7142de052108d845f15f4b%7C72f988bf86f141af91ab2d7cd011db47%7C1%7C0%7C637336250277599455&sdata=eW6nzeM9%2B2bh6FqgAffziJH81PAYCNdMlMoxrvaWZac%3D&reserved=0 | Extension 1138300 We value your feedback.  My manager is Natesha Morrison (namorri), +1 (704) 430-4292

-----Original Message-----
From: Stefan Metzmacher <metze at samba.org>
Sent: Friday, August 21, 2020 7:14 AM
To: Interoperability Documentation Help <dochelp at microsoft.com>; cifs-protocol at lists.samba.org
Subject: [EXTERNAL] MS-NRPC FullSecureChannelProtection

Hi DocHelp,

can you please make sure the exact behavior of HKLM\SYSTEM\CurrentControlSet\Services\Netlogon\Parameters\FullSecureChannelProtection = 1 is fully documented in MS-NRPC?

This is the change introduced by CVE-2020-1472.

Thanks!
metze