Gecko [ edgpens.lpkmn.gov.my ]

Name	Size	Permission
AVSValidationGP.adml	1.84 KB	-rw-rw-rw-
ActiveXInstallService.adml	5.47 KB	-rw-rw-rw-
AddRemovePrograms.adml	10.48 KB	-rw-rw-rw-
AllowBuildPreview.adml	1.28 KB	-rw-rw-rw-
AppCompat.adml	9.88 KB	-rw-rw-rw-
AppPrivacy.adml	30.53 KB	-rw-rw-rw-
AppXRuntime.adml	5.06 KB	-rw-rw-rw-
AppxPackageManager.adml	4.97 KB	-rw-rw-rw-
AttachmentManager.adml	9.61 KB	-rw-rw-rw-
AuditSettings.adml	1.8 KB	-rw-rw-rw-
AutoPlay.adml	4.77 KB	-rw-rw-rw-
Biometrics.adml	4.75 KB	-rw-rw-rw-
Bits.adml	31.41 KB	-rw-rw-rw-
CEIPEnable.adml	1.9 KB	-rw-rw-rw-
COM.adml	1.63 KB	-rw-rw-rw-
Camera.adml	1.59 KB	-rw-rw-rw-
CipherSuiteOrder.adml	3.4 KB	-rw-rw-rw-
CloudContent.adml	4.83 KB	-rw-rw-rw-
Conf.adml	10.72 KB	-rw-rw-rw-
ControlPanel.adml	8.03 KB	-rw-rw-rw-
ControlPanelDisplay.adml	20.98 KB	-rw-rw-rw-
Cpls.adml	1.55 KB	-rw-rw-rw-
CredSsp.adml	20.62 KB	-rw-rw-rw-
CredUI.adml	3.05 KB	-rw-rw-rw-
CredentialProviders.adml	7.28 KB	-rw-rw-rw-
CtrlAltDel.adml	3.41 KB	-rw-rw-rw-
DCOM.adml	4.95 KB	-rw-rw-rw-
DFS.adml	1.51 KB	-rw-rw-rw-
DWM.adml	4.71 KB	-rw-rw-rw-
DataCollection.adml	4.87 KB	-rw-rw-rw-
Desktop.adml	22.12 KB	-rw-rw-rw-
DeviceCompat.adml	1012 B	-rw-rw-rw-
DeviceCredential.adml	1.36 KB	-rw-rw-rw-
DeviceGuard.adml	5.14 KB	-rw-rw-rw-
DeviceInstallation.adml	20.04 KB	-rw-rw-rw-
DeviceRedirection.adml	2.83 KB	-rw-rw-rw-
DeviceSetup.adml	8.52 KB	-rw-rw-rw-
DigitalLocker.adml	1.16 KB	-rw-rw-rw-
DiskDiagnostic.adml	3.92 KB	-rw-rw-rw-
DiskNVCache.adml	4.15 KB	-rw-rw-rw-
DiskQuota.adml	9.09 KB	-rw-rw-rw-
DistributedLinkTracking.adml	1.19 KB	-rw-rw-rw-
DnsClient.adml	30.61 KB	-rw-rw-rw-
EAIME.adml	8.47 KB	-rw-rw-rw-
EarlyLaunchAM.adml	2.48 KB	-rw-rw-rw-
EdgeUI.adml	4.73 KB	-rw-rw-rw-
EncryptFilesonMove.adml	1.23 KB	-rw-rw-rw-
EnhancedStorage.adml	5.64 KB	-rw-rw-rw-
ErrorReporting.adml	30.15 KB	-rw-rw-rw-
EventForwarding.adml	2.49 KB	-rw-rw-rw-
EventLog.adml	11.12 KB	-rw-rw-rw-
EventLogging.adml	2.49 KB	-rw-rw-rw-
EventViewer.adml	2.31 KB	-rw-rw-rw-
Explorer.adml	4.26 KB	-rw-rw-rw-
ExternalBoot.adml	2.74 KB	-rw-rw-rw-
FeedbackNotifications.adml	1.17 KB	-rw-rw-rw-
FileHistory.adml	988 B	-rw-rw-rw-
FileRecovery.adml	2.91 KB	-rw-rw-rw-
FileRevocation.adml	2.55 KB	-rw-rw-rw-
FileServerVSSProvider.adml	1.48 KB	-rw-rw-rw-
FileSys.adml	5.37 KB	-rw-rw-rw-
FolderRedirection.adml	7.76 KB	-rw-rw-rw-
FramePanes.adml	2.11 KB	-rw-rw-rw-
GameExplorer.adml	1.85 KB	-rw-rw-rw-
Globalization.adml	26.12 KB	-rw-rw-rw-
GroupPolicy-Server.adml	1.45 KB	-rw-rw-rw-
GroupPolicy.adml	64.39 KB	-rw-rw-rw-
GroupPolicyPreferences.adml	130.2 KB	-rw-rw-rw-
Help.adml	5.51 KB	-rw-rw-rw-
HelpAndSupport.adml	3.02 KB	-rw-rw-rw-
ICM.adml	18.91 KB	-rw-rw-rw-
IIS.adml	1.38 KB	-rw-rw-rw-
InetRes.adml	450.49 KB	-rw-rw-rw-
InkWatson.adml	1.39 KB	-rw-rw-rw-
KDC.adml	11.73 KB	-rw-rw-rw-
Kerberos.adml	20.13 KB	-rw-rw-rw-
LanmanServer.adml	8.68 KB	-rw-rw-rw-
LanmanWorkstation.adml	5.12 KB	-rw-rw-rw-
LeakDiagnostic.adml	1.55 KB	-rw-rw-rw-
LinkLayerTopologyDiscovery.adm...	3.56 KB	-rw-rw-rw-
LocationProviderAdm.adml	1.18 KB	-rw-rw-rw-
Logon.adml	15.75 KB	-rw-rw-rw-
MDM.adml	1.14 KB	-rw-rw-rw-
MMC.adml	4.69 KB	-rw-rw-rw-
MMCSnapIns2.adml	3.18 KB	-rw-rw-rw-
MMCSnapins.adml	9.92 KB	-rw-rw-rw-
MSDT.adml	4.71 KB	-rw-rw-rw-
MSI.adml	29.85 KB	-rw-rw-rw-
MobilePCMobilityCenter.adml	1.18 KB	-rw-rw-rw-
MobilePCPresentationSettings.a...	1.45 KB	-rw-rw-rw-
Msi-FileRecovery.adml	3.01 KB	-rw-rw-rw-
NCSI.adml	5.48 KB	-rw-rw-rw-
Netlogon.adml	46.17 KB	-rw-rw-rw-
NetworkConnections.adml	41.01 KB	-rw-rw-rw-
NetworkIsolation.adml	6.59 KB	-rw-rw-rw-
NetworkProvider.adml	2.58 KB	-rw-rw-rw-
OfflineFiles.adml	49.72 KB	-rw-rw-rw-
P2P-pnrp.adml	15.59 KB	-rw-rw-rw-
Passport.adml	10.03 KB	-rw-rw-rw-
PeerToPeerCaching.adml	24.06 KB	-rw-rw-rw-
PenTraining.adml	1.18 KB	-rw-rw-rw-
PerformanceDiagnostics.adml	7.99 KB	-rw-rw-rw-
PerformancePerftrack.adml	1.18 KB	-rw-rw-rw-
Power.adml	30.64 KB	-rw-rw-rw-
PowerShellExecutionPolicy.adml	8.4 KB	-rw-rw-rw-
PreviousVersions.adml	5.18 KB	-rw-rw-rw-
Printing.adml	34.09 KB	-rw-rw-rw-
Printing2.adml	14.26 KB	-rw-rw-rw-
Programs.adml	6.86 KB	-rw-rw-rw-
QOS.adml	21.58 KB	-rw-rw-rw-
RPC.adml	13.4 KB	-rw-rw-rw-
RacWmiProv.adml	1.36 KB	-rw-rw-rw-
Radar.adml	2.65 KB	-rw-rw-rw-
ReAgent.adml	1.77 KB	-rw-rw-rw-
Reliability.adml	5.19 KB	-rw-rw-rw-
RemoteAssistance.adml	10.13 KB	-rw-rw-rw-
RemovableStorage.adml	13.32 KB	-rw-rw-rw-
Scripts.adml	12.24 KB	-rw-rw-rw-
Search.adml	36.07 KB	-rw-rw-rw-
Securitycenter.adml	2.41 KB	-rw-rw-rw-
Sensors.adml	2.01 KB	-rw-rw-rw-
ServerManager.adml	4.84 KB	-rw-rw-rw-
Servicing.adml	2.35 KB	-rw-rw-rw-
SettingSync.adml	9.51 KB	-rw-rw-rw-
Setup.adml	2.01 KB	-rw-rw-rw-
ShapeCollector.adml	1.64 KB	-rw-rw-rw-
SharedFolders.adml	1.81 KB	-rw-rw-rw-
Sharing.adml	2.41 KB	-rw-rw-rw-
Shell-CommandPrompt-RegEditToo...	5.12 KB	-rw-rw-rw-
ShellWelcomeCenter.adml	1.01 KB	-rw-rw-rw-
Sidebar.adml	2.13 KB	-rw-rw-rw-
SkyDrive.adml	3.83 KB	-rw-rw-rw-
Smartcard.adml	13.57 KB	-rw-rw-rw-
Snmp.adml	4.92 KB	-rw-rw-rw-
SoundRec.adml	1.13 KB	-rw-rw-rw-
StartMenu.adml	53.79 KB	-rw-rw-rw-
SystemRestore.adml	2.58 KB	-rw-rw-rw-
TPM.adml	18.92 KB	-rw-rw-rw-
TabletPCInputPanel.adml	14.61 KB	-rw-rw-rw-
TabletShell.adml	6.52 KB	-rw-rw-rw-
TaskScheduler.adml	6.87 KB	-rw-rw-rw-
Taskbar.adml	12.69 KB	-rw-rw-rw-
TerminalServer-Server.adml	18.12 KB	-rw-rw-rw-
TerminalServer.adml	129.66 KB	-rw-rw-rw-
Thumbnails.adml	2.44 KB	-rw-rw-rw-
TouchInput.adml	2.01 KB	-rw-rw-rw-
UserExperienceVirtualization.a...	110.67 KB	-rw-rw-rw-
UserProfiles.adml	42.87 KB	-rw-rw-rw-
VolumeEncryption.adml	100.16 KB	-rw-rw-rw-
W32Time.adml	16.42 KB	-rw-rw-rw-
WCM.adml	5.59 KB	-rw-rw-rw-
WDI.adml	3.58 KB	-rw-rw-rw-
WPN.adml	7.83 KB	-rw-rw-rw-
WinCal.adml	1.06 KB	-rw-rw-rw-
WinInit.adml	2.42 KB	-rw-rw-rw-
WinLogon.adml	8.77 KB	-rw-rw-rw-
WinMaps.adml	1.78 KB	-rw-rw-rw-
Windows.adml	9.2 KB	-rw-rw-rw-
WindowsAnytimeUpgrade.adml	1.03 KB	-rw-rw-rw-
WindowsBackup.adml	3.4 KB	-rw-rw-rw-
WindowsColorSystem.adml	1.39 KB	-rw-rw-rw-
WindowsConnectNow.adml	3.33 KB	-rw-rw-rw-
WindowsDefender.adml	75.79 KB	-rw-rw-rw-
WindowsExplorer.adml	56.6 KB	-rw-rw-rw-
WindowsFileProtection.adml	4.16 KB	-rw-rw-rw-
WindowsFirewall.adml	42.14 KB	-rw-rw-rw-
WindowsInkWorkspace.adml	1.55 KB	-rw-rw-rw-
WindowsMail.adml	1.13 KB	-rw-rw-rw-
WindowsMediaDRM.adml	1.6 KB	-rw-rw-rw-
WindowsMediaPlayer.adml	21.55 KB	-rw-rw-rw-
WindowsMessenger.adml	2.55 KB	-rw-rw-rw-
WindowsProducts.adml	5.98 KB	-rw-rw-rw-
WindowsRemoteManagement.adml	14.21 KB	-rw-rw-rw-
WindowsRemoteShell.adml	5.37 KB	-rw-rw-rw-
WindowsServer.adml	1011 B	-rw-rw-rw-
WindowsStore.adml	3.5 KB	-rw-rw-rw-
WindowsUpdate.adml	43.45 KB	-rw-rw-rw-
Winsrv.adml	1.42 KB	-rw-rw-rw-
WirelessDisplay.adml	1.45 KB	-rw-rw-rw-
WordWheel.adml	2.56 KB	-rw-rw-rw-
WorkFolders-Client.adml	3.38 KB	-rw-rw-rw-
WorkplaceJoin.adml	1.2 KB	-rw-rw-rw-
appv.adml	25 KB	-rw-rw-rw-
fthsvc.adml	1.77 KB	-rw-rw-rw-
hotspotauth.adml	1.47 KB	-rw-rw-rw-
iSCSI.adml	5.1 KB	-rw-rw-rw-
msched.adml	3.37 KB	-rw-rw-rw-
nca.adml	8.28 KB	-rw-rw-rw-
pca.adml	6.09 KB	-rw-rw-rw-
sdiageng.adml	3.21 KB	-rw-rw-rw-
sdiagschd.adml	2.5 KB	-rw-rw-rw-
srm-fci.adml	7.49 KB	-rw-rw-rw-
tcpip.adml	13.15 KB	-rw-rw-rw-
wlansvc.adml	4.44 KB	-rw-rw-rw-
wwansvc.adml	2.9 KB	-rw-rw-rw-

Code Editor : Netlogon.adml

<?xml version="1.0" encoding="utf-8"?>

<policyDefinitionResources xmlns:xsd="http://www.w3.org/2001/XMLSchema" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" revision="1.0" schemaVersion="1.0" xmlns="http://schemas.microsoft.com/GroupPolicy/2006/07/PolicyDefinitions">
  <displayName>enter display name here</displayName>
  <description>enter description here</description>
  <resources>
    <stringTable>
      <string id="Netlogon">Net Logon</string>
      <string id="Netlogon_AllowSingleLabelDnsDomain">Use DNS name resolution with a single-label domain name instead of NetBIOS name resolution to locate the DC</string>
      <string id="Netlogon_AllowSingleLabelDnsDomain_Help">This policy setting specifies whether the computers to which this setting is applied attempt DNS name resolution of a single-label domain names.

By default, the behavior specified in the AllowDnsSuffixSearch is used. If the AllowDnsSuffixSearch policy is disabled, then NetBIOS name resolution is used exclusively, to locate a domain controller hosting an Active Directory domain specified with a single-label name.

If you enable this policy setting, computers to which this policy is applied will attempt to locate a domain controller hosting an Active Directory domain specified with a single-label name using DNS name resolution.

If you disable this policy setting, computers to which this setting is applied will use the AllowDnsSuffixSearch policy, if it is not disabled or perform NetBIOS name resolution otherwise, to attempt to locate a domain controller that hosts an Active Directory domain specified with a single-label name. the computers will not the DNS name resolution in this case, unless the computer is searching for a domain with a single label DNS name that exists in the Active Directory forest to which this computer is joined.

If you do not configure this policy setting, it is not applied to any computers, and computers use their local configuration.</string>
      <string id="Netlogon_AllowDnsSuffixSearch">Use DNS name resolution when a single-label domain name is used, by appending different registered DNS suffixes, if the AllowSingleLabelDnsDomain setting is not enabled.</string>
      <string id="Netlogon_AllowDnsSuffixSearch_Help">This policy setting specifies whether the computers to which this setting is applied attemps DNS name resolution of single-lablel domain names, by appending different registered DNS suffixes, and uses NetBIOS name resolution only if DNS name resolution fails. This policy, including the specified default behavior, is not used if the AllowSingleLabelDnsDomain policy setting is enabled.

By default, when no setting is specified for this policy, the behavior is the same as explicitly enabling this policy, unless the AllowSingleLabelDnsDomain policy setting is enabled.

If you enable this policy setting, when the AllowSingleLabelDnsDomain policy is not enabled, computers to which this policy is applied, will locate a domain controller hosting an Active Directory domain specified with a single-label name, by appending different registered DNS suffixes to perform DNS name resolution. The single-label name is not used without appending DNS suffixes unless the computer is joined to a domain that has a single-label DNS name in the Active Directory forest. NetBIOS name resolution is performed on the single-label name only, in the event that DNS resolution fails.

If you disable this policy setting, when the AllowSingleLabelDnsDomain policy is not enabled, computers to which this policy is applied, will only use NetBIOS name resolution to attempt to locate a domain controller hosting an Active Directory domain specified with a single-label name. The computers will not attempt DNS name resolution in this case, unless the computer is searching for a domain with a single label DNS name to which this computer is joined, in the Active Directory forest.
</string>
      <string id="Netlogon_AutoSiteCoverage">Use automated site coverage by the DC Locator DNS SRV Records</string>
      <string id="Netlogon_AutoSiteCoverage_Help">This policy setting determines whether domain controllers (DC) will dynamically register DC Locator site-specific SRV records for the closest sites where no DC for the same domain exists (or no Global Catalog for the same forest exists). These DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC.

If you enable this policy setting, the DCs to which this setting is applied dynamically register DC Locator site-specific DNS SRV records for the closest sites where no DC for the same domain, or no Global Catalog for the same forest, exists.

If you disable this policy setting, the DCs will not register site-specific DC Locator DNS SRV records for any other sites but their own.

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>
      <string id="Netlogon_AvoidPdcOnWan">Contact PDC on logon failure</string>
      <string id="Netlogon_AvoidPdcOnWan_Help">This policy setting defines whether a domain controller (DC) should attempt to verify the password provided by a client with the PDC emulator if the DC failed to validate the password.

Contacting the PDC emulator is useful in case the client’s password was recently changed and did not propagate to the DC yet. Users may want to disable this feature if the PDC emulator is located over a slow WAN connection.

If you enable this policy setting, the DCs to which this policy setting applies will attempt to verify a password with the PDC emulator if the DC fails to validate the password.

If you disable this policy setting, the DCs will not attempt to verify any passwords with the PDC emulator.

If you do not configure this policy setting, it is not applied to any DCs.</string>
      <string id="Netlogon_BackgroundRetryInitialPeriod">Use initial DC discovery retry setting for background callers</string>
      <string id="Netlogon_BackgroundRetryInitialPeriod_Help">This policy setting determines the amount of time (in seconds) to wait before the first retry for applications that perform periodic searches for domain controllers (DC) that are unable to find a DC.

The default value for this setting is 10 minutes (10*60). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0.

This setting is relevant only to those callers of DsGetDcName that have specified the DS_BACKGROUND_ONLY flag.

If the value of this setting is less than the value specified in the NegativeCachePeriod subkey, the value in the NegativeCachePeriod subkey is used.

Warning: If the value for this setting is too large, a client will not attempt to find any DCs that were initially unavailable. If the value set in this setting is very small and the DC is not available, the traffic caused by periodic DC discoveries may be excessive.</string>
      <string id="Netlogon_BackgroundRetryMaximumPeriod">Use maximum DC discovery retry interval setting for background callers</string>
      <string id="Netlogon_BackgroundRetryMaximumPeriod_Help">This policy setting determines  the maximum retry interval allowed when applications performing periodic searches for Domain Controllers (DCs) are unable to find a DC.

For example, the retry intervals may be set at 10 minutes, then 20 minutes and then 40 minutes, but when the interval reaches the value set in this setting, that value becomes the retry interval for all subsequent retries until the value set in Final DC Discovery Retry Setting is reached.

The default value for this setting is 60 minutes (60*60). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0.

If the value for this setting is smaller than the value specified for the Initial DC Discovery Retry Setting, the Initial DC Discovery Retry Setting is used.

Warning: If the value for this setting is too large, a client may take very long periods to try to find a DC.

If the value for this setting is too small and the DC is not available, the frequent retries may produce excessive network traffic.</string>
      <string id="Netlogon_BackgroundRetryQuitTime">Use final DC discovery retry setting for background callers</string>
      <string id="Netlogon_BackgroundRetryQuitTime_Help">This policy setting determines when retries are no longer allowed for applications that perform periodic searches for domain controllers (DC) are unable to find a DC. For example, retires may be set to occur according to the Use maximum DC discovery retry interval policy setting, but when the value set in this policy setting is reached, no more retries occur. If a value for this policy setting is smaller than the value in the Use maximum DC discovery retry interval policy setting, the value for Use maximum DC discovery retry interval policy setting is used.

The default value for this setting is to not quit retrying (0). The maximum value for this setting is 49 days (0x49*24*60*60=4233600). The minimum value for this setting is 0.

Warning: If the value for this setting is too small, a client will stop trying to find a DC too soon.</string>
      <string id="Netlogon_BackgroundSuccessfulRefreshPeriod">Use positive periodic DC cache refresh for background callers</string>
      <string id="Netlogon_BackgroundSuccessfulRefreshPeriod_Help">This policy setting determines when a successful DC cache entry is refreshed. This policy setting is applied to caller programs that periodically attempt to locate DCs, and it is applied before  returning the DC information to the caller program. The default value for this setting is infinite (4294967200). The maximum value for this setting is (4294967200), while the maximum that is not treated as infinity is 49 days (49*24*60*60=4233600). Any larger value is treated as infinity. The minimum value for this setting is to always refresh (0).</string>
      <string id="Netlogon_DC_Locator_DNS_Records">DC Locator DNS Records</string>
      <string id="Netlogon_DebugFlag">Specify log file debug output level</string>
      <string id="Netlogon_DebugFlag_Help">This policy setting specifies the level of debug output for the Net Logon service.

The Net Logon service outputs debug information to the log file netlogon.log in the directory %windir%\debug. By default, no debug information is logged.

If you enable this policy setting and specify a non-zero value, debug information will be logged to the file.  Higher values result in more verbose logging; the value of 536936447 is commonly used as an optimal setting.

If you specify zero for this policy setting, the default behavior occurs as described above.

If you disable this policy setting or do not configure it, the default behavior occurs as described above.</string>
      <string id="Netlogon_DnsAvoidRegisterRecords">Specify DC Locator DNS records not registered by the DCs</string>
      <string id="Netlogon_DnsAvoidRegisterRecords_Help">This policy setting determines which DC Locator DNS records are not registered by the Net Logon service.

If you enable this policy setting, select Enabled and specify a list of space-delimited mnemonics (instructions) for the DC Locator DNS records that will not be registered by the DCs to which this setting is applied.

Select the mnemonics from the following list:

Mnemonic         Type  DNS Record

LdapIpAddress    A     &lt;DnsDomainName&gt;
Ldap             SRV   _ldap._tcp.&lt;DnsDomainName&gt;
LdapAtSite       SRV   _ldap._tcp.&lt;SiteName&gt;._sites.&lt;DnsDomainName&gt;
Pdc              SRV   _ldap._tcp.pdc._msdcs.&lt;DnsDomainName&gt;
Gc               SRV   _ldap._tcp.gc._msdcs.&lt;DnsForestName&gt;
GcAtSite         SRV   _ldap._tcp.&lt;SiteName&gt;._sites.gc._msdcs.&lt;DnsForestName&gt;
DcByGuid         SRV   _ldap._tcp.&lt;DomainGuid&gt;.domains._msdcs.&lt;DnsForestName&gt;
GcIpAddress      A     gc._msdcs.&lt;DnsForestName&gt;
DsaCname         CNAME &lt;DsaGuid&gt;._msdcs.&lt;DnsForestName&gt;
Kdc              SRV   _kerberos._tcp.dc._msdcs.&lt;DnsDomainName&gt;
KdcAtSite        SRV   _kerberos._tcp.&lt;SiteName&gt;._sites.dc._msdcs.&lt;DnsDomainName&gt;
Dc               SRV   _ldap._tcp.dc._msdcs.&lt;DnsDomainName&gt;
DcAtSite         SRV   _ldap._tcp.&lt;SiteName&gt;._sites.dc._msdcs.&lt;DnsDomainName&gt;
Rfc1510Kdc       SRV   _kerberos._tcp.&lt;DnsDomainName&gt;
Rfc1510KdcAtSite SRV   _kerberos._tcp.&lt;SiteName&gt;._sites.&lt;DnsDomainName&gt;
GenericGc        SRV   _gc._tcp.&lt;DnsForestName&gt;
GenericGcAtSite  SRV   _gc._tcp.&lt;SiteName&gt;._sites.&lt;DnsForestName&gt;
Rfc1510UdpKdc    SRV   _kerberos._udp.&lt;DnsDomainName&gt;
Rfc1510Kpwd      SRV   _kpasswd._tcp.&lt;DnsDomainName&gt;
Rfc1510UdpKpwd   SRV   _kpasswd._udp.&lt;DnsDomainName&gt;

If you disable this policy setting, DCs configured to perform dynamic registration of DC Locator DNS records register all DC Locator DNS resource records.

If you do not configure this policy setting, DCs use their local configuration.</string>
      <string id="Netlogon_DnsRefreshInterval">Specify Refresh Interval of the DC Locator DNS records</string>
      <string id="Netlogon_DnsRefreshInterval_Help">This policy setting specifies the Refresh Interval of the DC Locator DNS resource records for DCs to which this setting is applied. These DNS records are dynamically registered by the Net Logon service and are used by the DC Locator algorithm to locate the DC. This setting may be applied only to DCs using dynamic update.

DCs configured to perform dynamic registration of the DC Locator DNS resource records periodically reregister their records with DNS servers, even if their records’ data has not changed. If authoritative DNS servers are configured to perform scavenging of the stale records, this reregistration is required to instruct the DNS servers configured to automatically remove (scavenge) stale records that these records are current and should be preserved in the database.

Warning: If the DNS resource records are registered in zones with scavenging enabled, the value of this setting should never be longer than the Refresh Interval configured for these zones. Setting the Refresh Interval of the DC Locator DNS records to longer than the Refresh Interval of the DNS zones may result in the undesired deletion of DNS resource records.

To specify the Refresh Interval of the DC records, click Enabled, and then enter a value larger than 1800. This value specifies the Refresh Interval of the DC records in seconds (for example, the value 3600 is 60 minutes).

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>
      <string id="Netlogon_DnsTtl">Set TTL  in the DC Locator DNS Records</string>
      <string id="Netlogon_DnsTtl_Help">This policy setting specifies the value for the Time-To-Live (TTL) field in SRV resource records that are registered by the Net Logon service. These DNS records are dynamically registered, and they are used to locate the domain controller (DC).

To specify the TTL for DC Locator DNS records, click Enabled, and then enter a value in seconds (for example, the value "900" is 15 minutes).

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>
      <string id="Netlogon_ExpectedDialupDelay">Specify expected dial-up delay on logon</string>
      <string id="Netlogon_ExpectedDialupDelay_Help">This policy setting specifies the additional time for the computer to wait for the domain controller’s (DC) response when logging on to the network.

To specify the expected dial-up delay at logon, click Enabled, and then enter the desired value in seconds (for example, the value "60" is 1 minute).

If you do not configure this policy setting, it is not applied to any computers, and computers use their local configuration.</string>
      <string id="Netlogon_GcSiteCoverage">Specify sites covered by the GC Locator DNS SRV Records</string>
      <string id="Netlogon_GcSiteCoverage_Help">This policy setting specifies the sites for which the global catalogs (GC) should register site-specific GC locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the GC resides, and records registered by a GC configured to register GC Locator DNS SRV records for those sites without a GC that are closest to it.

The GC Locator DNS records and the site-specific SRV records are dynamically registered by the Net Logon service, and they are used to locate the GC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication. A GC is a domain controller that contains a partial replica of every domain in Active Directory.

To specify the sites covered by the GC Locator DNS SRV records, click Enabled, and enter the sites' names in a space-delimited format.

If you do not configure this policy setting, it is not applied to any GCs, and GCs use their local configuration.</string>
      <string id="Netlogon_LdapSrvPriority">Set Priority in the DC Locator DNS SRV records</string>
      <string id="Netlogon_LdapSrvPriority_Help">This policy setting specifies the Priority field in the SRV resource records registered by domain controllers (DC) to which this setting is applied. These DNS records are dynamically registered by the Net Logon service and are used to locate the DC.

The Priority field in the SRV record sets the preference for target hosts (specified in the SRV record’s Target field). DNS clients that query for SRV resource records attempt to contact the first reachable host with the lowest priority number listed.

To specify the Priority in the DC Locator DNS SRV resource records, click Enabled, and then enter a value. The range of values is from 0 to 65535.

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>
      <string id="Netlogon_LdapSrvWeight">Set Weight in the DC Locator DNS SRV records</string>
      <string id="Netlogon_LdapSrvWeight_Help">This policy setting specifies the Weight field in the SRV resource records registered by the domain controllers (DC) to which this setting is applied. These DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC.

The Weight field in the SRV record can be used in addition to the Priority value to provide a load-balancing mechanism where multiple servers are specified in the SRV records Target field and are all set to the same priority. The probability with which the DNS client randomly selects the target host to be contacted is proportional to the Weight field value in the SRV record.

To specify the Weight in the DC Locator DNS SRV records, click Enabled, and then enter a value. The range of values is from 0 to 65535.

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>
      <string id="Netlogon_MaximumLogFileSize">Specify maximum log file size</string>
      <string id="Netlogon_MaximumLogFileSize_Help">This policy setting specifies the maximum size in bytes of the log file netlogon.log in the directory %windir%\debug when logging is enabled.

By default, the maximum size of the log file is 20MB. If you enable this policy setting, the maximum size of the log file is set to the specified size.  Once this size is reached the log file is saved to netlogon.bak and netlogon.log is truncated. A reasonable value based on available storage should be specified.

If you disable or do not configure this policy setting, the default behavior occurs as indicated above.</string>
      <string id="Netlogon_NdncSiteCoverage">Specify sites covered by the application directory partition DC Locator DNS SRV records</string>
      <string id="Netlogon_NdncSiteCoverage_Help">This policy setting specifies the sites for which the domain controllers (DC) that host the application directory partition should register the site-specific, application directory partition-specific DC Locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the DC resides, and records registered by a DC configured to register DC Locator DNS SRV records for those sites without a DC that are closest to it.

The application directory partition DC Locator DNS records and the site-specific SRV records are dynamically registered by the Net Logon service, and they are used to locate the application directory partition-specific DC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication.

To specify the sites covered by the DC Locator application directory partition-specific DNS SRV records, click Enabled, and then enter the site names in a space-delimited format.

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>
      <string id="Netlogon_NegativeCachePeriod">Specify negative DC Discovery cache setting</string>
      <string id="Netlogon_NegativeCachePeriod_Help">This policy setting specifies the amount of time (in seconds) the DC locator remembers that a domain controller (DC) could not be found in a domain. When a subsequent attempt to locate the DC occurs within the time set in this setting, DC Discovery immediately fails, without attempting to find the DC.

The default value for this setting is 45 seconds. The maximum value for this setting is 7 days (7*24*60*60). The minimum value for this setting is 0.

Warning: If the value for this setting is too large, a client will not attempt to find any DCs that were initially unavailable. If the value for this setting is too small, clients will attempt to find DCs even when none are available.</string>
      <string id="Netlogon_NetlogonShareCompatibilityMode">Set Netlogon share compatibility</string>
      <string id="Netlogon_NetlogonShareCompatibilityMode_Help">This policy setting controls whether or not the Netlogon share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing semantics with earlier applications.

If you enable this policy setting, the Netlogon share will honor file sharing semantics that grant requests for exclusive read access to files on the share even when the caller has only read permission.

If you disable or do not configure this policy setting, the Netlogon share will grant shared read access to files on the share when exclusive access is requested and the caller has only read permission.

By default, the Netlogon share will grant shared read access to files on the share when exclusive access is requested.

Note: The Netlogon share is a share created by the Net Logon service for use by client machines in the domain. The default behavior of the Netlogon share ensures that no application with only read permission to files on the Netlogon share can lock the files by requesting exclusive read access, which might prevent Group Policy settings from being updated on clients in the domain. When this setting is enabled, an application that relies on the ability to lock files on the Netlogon share with only read permission will be able to deny Group Policy clients from reading the files, and in general the availability of the Netlogon share on the domain will be decreased.

If you enable this policy setting, domain administrators should ensure that the only applications using the exclusive read capability in the domain are those approved by the administrator.</string>
      <string id="Netlogon_NonBackgroundSuccessfulRefreshPeriod">Specify positive periodic DC Cache refresh for non-background callers</string>
      <string id="Netlogon_NonBackgroundSuccessfulRefreshPeriod_Help">This policy setting determines when a successful DC cache entry is refreshed. This policy setting is applied to caller programs that do not periodically attempt to locate DCs, and it is applied before the returning the DC information to the caller program. This policy setting is relevant to only those callers of DsGetDcName that have not specified the DS_BACKGROUND_ONLY flag.

The default value for this setting is 30 minutes (1800). The maximum value for this setting is (4294967200), while the maximum that is not treated as infinity is 49 days (49*24*60*60=4233600). Any larger value will be treated as infinity. The minimum value for this setting is to always refresh (0).</string>
      <string id="Netlogon_ScavengeInterval">Set scavenge interval</string>
      <string id="Netlogon_ScavengeInterval_Help">This policy setting determines the interval at which Netlogon performs the following scavenging operations:

- Checks if a password on a secure channel needs to be modified, and modifies it if necessary.

- On the domain controllers (DC), discovers a DC that has not been discovered.

- On the PDC, attempts to add the &lt;DomainName&gt;[1B] NetBIOS name if it hasn’t already been successfully added.

None of these operations are critical. 15 minutes is optimal in all but extreme cases. For instance, if a DC is separated from a trusted domain by an expensive (e.g., ISDN) line, this parameter might be adjusted upward to avoid frequent automatic discovery of DCs in a trusted domain.

To enable the setting, click Enabled, and then specify the interval in seconds.</string>
      <string id="Netlogon_SiteCoverage">Specify sites covered by the DC Locator DNS SRV records</string>
      <string id="Netlogon_SiteCoverage_Help">This policy setting specifies the sites for which the domain controllers (DC) register the site-specific DC Locator DNS SRV resource records. These records are registered in addition to the site-specific SRV records registered for the site where the DC resides, and records registered by a DC configured to register DC Locator DNS SRV records for those sites without a DC that are closest to it.

The DC Locator DNS records are dynamically registered by the Net Logon service, and they are used to locate the DC. An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication.

To specify the sites covered by the DC Locator DNS SRV records, click Enabled, and then enter the sites names in a space-delimited format.

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>
      <string id="Netlogon_SiteName">Specify site name</string>
      <string id="Netlogon_SiteName_Help">This policy setting specifies the Active Directory site to which computers belong.

An Active Directory site is one or more well-connected TCP/IP subnets that allow administrators to configure Active Directory access and replication.

To specify the site name for this setting, click Enabled, and then enter the site name. When the site to which a computer belongs is not specified, the computer automatically discovers its site from Active Directory.

If you do not configure this policy setting, it is not applied to any computers, and computers use their local configuration.</string>
      <string id="Netlogon_SysvolShareCompatibilityMode">Set SYSVOL share compatibility</string>
      <string id="Netlogon_SysvolShareCompatibilityMode_Help">This policy setting controls whether or not the SYSVOL share created by the Net Logon service on a domain controller (DC) should support compatibility in file sharing semantics with earlier applications.

When this setting is enabled, the SYSVOL share will honor file sharing semantics that grant requests for exclusive read access to files on the share even when the caller has only read permission.

When this setting is disabled or not configured, the SYSVOL share will grant shared read access to files on the share when exclusive access is requested and the caller has only read permission.

By default, the SYSVOL share will grant shared read access to files on the share when exclusive access is requested.

Note: The SYSVOL share is a share created by the Net Logon service for use by Group Policy clients in the domain. The default behavior of the SYSVOL share ensures that no application with only read permission to files on the sysvol share can lock the files by requesting exclusive read access, which might prevent Group Policy settings from being updated on clients in the domain. When this setting is enabled, an application that relies on the ability to lock files on the SYSVOL share with only read permission will be able to deny Group Policy clients from reading the files, and in general the availability of the SYSVOL share on the domain will be decreased.

If you enable this policy setting, domain administrators should ensure that the only applications using the exclusive read capability in the domain are those approved by the administrator.</string>
      <string id="Netlogon_UseDynamicDns">Specify dynamic registration of the DC Locator DNS Records</string>
      <string id="Netlogon_UseDynamicDns_Help">This policy setting determines if dynamic registration of the domain controller (DC) locator DNS resource records is enabled. These DNS records are dynamically registered by the Net Logon service and are used by the Locator algorithm to locate the DC.

If you enable this policy setting, DCs to which this setting is applied dynamically register DC Locator DNS resource records through dynamic DNS update-enabled network connections.

If you disable this policy setting, DCs will not register DC Locator DNS resource records.

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>
      <string id="Netlogon_TryNextClosestSite">Try Next Closest Site</string>
      <string id="Netlogon_TryNextClosestSite_Help">This policy setting enables DC Locator to attempt to locate a DC in the nearest site based on the site link cost if a DC in same the site is not found. In scenarios with multiple sites, failing over to the try next closest site during DC Location streamlines network traffic more effectively.

The DC Locator service is used by clients to find domain controllers for their Active Directory domain. The default behavior for DC Locator is to find a DC in the same site. If none are found in the same site, a DC in another site, which might be several site-hops away, could be returned by DC Locator. Site proximity between two sites is determined by the total site-link cost between them. A site is closer if it has a lower site link cost than another site with a higher site link cost.

If you enable this policy setting, Try Next Closest Site DC Location will be turned on for the computer.

If you disable this policy setting, Try Next Closest Site DC Location will not be used by default for the computer. However, if a DC Locator call is made using the DS_TRY_NEXTCLOSEST_SITE flag explicitly, the Try Next Closest Site behavior is honored.

If you do not configure this policy setting, Try Next Closest Site DC Location will not be used by default for the machine. If the DS_TRY_NEXTCLOSEST_SITE flag is used explicitly, the Next Closest Site behavior will be used.</string>
      <string id="Netlogon_ForceRediscoveryInterval">Force Rediscovery Interval</string>
      <string id="Netlogon_ForceRediscoveryInterval_Help">This policy setting determines the interval for when a Force Rediscovery is carried out by DC Locator.

The Domain Controller Locator (DC Locator) service is used by clients to find domain controllers for their Active Directory domain. When DC Locator finds a domain controller, it caches domain controllers to improve the efficiency of the location algorithm. As long as the cached domain controller meets the requirements and is running, DC Locator will continue to return it. If a new domain controller is introduced, existing clients will only discover it when a Force Rediscovery is carried out by DC Locator. To adapt to changes in network conditions DC Locator will by default carry out a Force Rediscovery according to a specific time interval and maintain efficient load-balancing of clients across all available domain controllers in all domains or forests. The default time interval for Force Rediscovery by DC Locator is 12 hours. Force Rediscovery can also be triggered if a call to DC Locator uses the DS_FORCE_REDISCOVERY flag. Rediscovery resets the timer on the cached domain controller entries.

If you enable this policy setting, DC Locator on the machine will carry out Force Rediscovery periodically according to the configured time interval. The minimum time interval is 3600 seconds (1 hour) to avoid excessive network traffic from rediscovery. The maximum allowed time interval is 4294967200 seconds, while any value greater than 4294967 seconds (~49 days) will be treated as infinity.

If you disable this policy setting, Force Rediscovery will be used by default for the machine at every 12 hour interval.

If you do not configure this policy setting, Force Rediscovery will be used by default for the machine at every 12 hour interval, unless the local machine setting in the registry is a different value.</string>
      <string id="Netlogon_AddressTypeReturned">Return domain controller address type</string>
      <string id="Netlogon_AddressTypeReturned_Help">This policy setting detremines the type of IP address that is returned for a domain controller. The DC Locator APIs return the IP address of the DC with the other parts of information. Before the support of IPv6, the returned DC IP address was IPv4. But with the support of IPv6, the DC Locator APIs can return IPv6 DC address. The returned IPv6 DC address may not be correctly handled by some of the existing applications. So this policy is provided to support such scenarios.

By default, DC Locator APIs can return IPv4/IPv6 DC address. But if some applications are broken due to the returned IPv6 DC address, this policy can be used to disable the default behavior and enforce to return only IPv4 DC address. Once applications are fixed, this policy can be used to enable the default behavior.

If you enable this policy setting, DC Locator APIs can return IPv4/IPv6 DC address. This is the default behavior of the DC Locator.

If you disable this policy setting, DC Locator APIs will ONLY return IPv4 DC address if any. So if the domain controller supports both IPv4 and IPv6 addresses, DC Locator APIs will return IPv4 address. But if the domain controller supports only IPv6 address, then DC Locator APIs will fail.

If you do not configure this policy setting, DC Locator APIs can return IPv4/IPv6 DC address. This is the default behavior of the DC Locator.</string>
      <string id="Netlogon_AllowNT4Crypto">Allow cryptography algorithms compatible with Windows NT 4.0</string>
      <string id="Netlogon_AllowNT4Crypto_Help">This policy setting controls whether the Net Logon service will allow the use of older cryptography algorithms that are used in Windows NT 4.0. The cryptography algorithms used in Windows NT 4.0 and earlier are not as secure as newer algorithms used in Windows 2000 or later, including this version of Windows.

By default, Net Logon will not allow the older cryptography algorithms to be used and will not include them in the negotiation of cryptography algorithms. Therefore, computers running Windows NT 4.0 will not be able to establish a connection to this domain controller.
 
If you enable this policy setting, Net Logon will allow the negotiation and use of older cryptography algorithms compatible with Windows NT 4.0. However, using the older algorithms represents a potential security risk.

If you disable this policy setting, Net Logon will not allow the negotiation and use of older cryptography algorithms.

If you do not configure this policy setting, Net Logon will not allow the negotiation and use of older cryptography algorithms.</string>
      <string id="Netlogon_IgnoreIncomingMailslotMessages">Do not process incoming mailslot messages used for domain controller location based on NetBIOS domain names</string>
      <string id="Netlogon_IgnoreIncomingMailslotMessages_Help">This policy setting allows you to control the processing of incoming mailslot messages by a local domain controller (DC).

Note: To locate a remote DC based on its NetBIOS (single-label) domain name, DC Locator first gets the list of DCs from a WINS server that is configured in its local client settings. DC Locator then sends a mailslot message to each remote DC to get more information. DC location succeeds only if a remote DC responds to the mailslot message.

This policy setting is recommended to reduce the attack surface on a DC, and can be used in an environment without WINS, in an IPv6-only environment, and whenever DC location based on a NetBIOS domain name is not required. This policy setting does not affect DC location based on DNS names.

If you enable this policy setting, this DC does not process incoming mailslot messages that are used for NetBIOS domain name based DC location.

If you disable or do not configure this policy setting, this DC processes incoming mailslot messages. This is the default behavior of DC Locator.</string>
      <string id="Netlogon_AvoidFallbackNetbiosDiscovery">Do not use NetBIOS-based discovery for domain controller location when DNS-based discovery fails</string>
      <string id="Netlogon_AvoidFallbackNetbiosDiscovery_Help">This policy setting allows you to control the domain controller (DC) location algorithm. By default, the DC location algorithm prefers DNS-based discovery if the DNS domain name is known. If DNS-based discovery fails and the NetBIOS domain name is known, the algorithm then uses NetBIOS-based discovery as a fallback mechanism.

NetBIOS-based discovery uses a WINS server and mailslot messages but does not use site information. Hence it does not ensure that clients will discover the closest DC. It also allows a hub-site client to discover a branch-site DC even if the branch-site DC only registers site-specific DNS records (as recommended). For these reasons, NetBIOS-based discovery is not recommended.

Note that this policy setting does not affect NetBIOS-based discovery for DC location if only the NetBIOS domain name is known.

If you enable or do not configure this policy setting, the DC location algorithm does not use NetBIOS-based discovery as a fallback mechanism when DNS-based discovery fails. This is the default behavior.

If you disable this policy setting, the DC location algorithm can use NetBIOS-based discovery as a fallback mechanism when DNS based discovery fails.</string>

<string id="Netlogon_AddressLookupOnPingBehavior">Specify address lookup behavior for DC locator ping</string>
      <string id="Netlogon_AddressLookupOnPingBehavior_Help">This policy setting configures how a domain controller (DC) behaves when responding to a client whose IP address does not map to any configured site.

Domain controllers use the client IP address during a DC locator ping request to compute which Active Directory site the client belongs to.   If no site mapping can be computed, the DC may do an address lookup on the client network name to discover other IP addresses which may then be used to compute a matching site for the client.

The allowable values for this setting result in the following behaviors:

0 - DCs will never perform address lookups.
1 - DCs will perform an exhaustive address lookup to discover additional client IP addresses.
2 - DCs will perform a fast, DNS-only address lookup to discover additional client IP addresses.

To specify this behavior in the DC Locator DNS SRV records, click Enabled, and then enter a value. The range of values is from 0 to 2.

If you do not configure this policy setting, it is not applied to any DCs, and DCs use their local configuration.</string>

<string id="Netlogon_PingUrgencyMode">Use urgent mode when pinging domain controllers</string>
      <string id="Netlogon_PingUrgencyMode_Help">This policy setting configures whether the computers to which this setting is applied are more aggressive when trying to locate a domain controller (DC).

When an environment has a large number of DCs running both old and new operating systems, the default DC locator discovery behavior may be insufficient to find DCs running a newer operating system.  This policy setting can be enabled to configure DC locator to be more aggressive about trying to locate a DC in such an environment, by pinging DCs at a higher frequency.  Enabling this setting may result in additional network traffic and increased load on DCs.  You should disable this setting once all DCs are running the same OS version.

The allowable values for this setting result in the following behaviors:

1 - Computers will ping DCs at the normal frequency.
2 - Computers will ping DCs at the higher frequency.

To specify this behavior, click Enabled and then enter a value. The range of values is from 1 to 2.

If you do not configure this policy setting, it is not applied to any computers, and computers use their local configuration.</string>

<string id="Netlogon_DnsSrvRecordUseLowerCaseHostNames">Use lowercase DNS host names when registering domain controller SRV records</string>
      <string id="Netlogon_DnsSrvRecordUseLowerCaseHostNames_Help">This policy setting configures whether the domain controllers to which this setting is applied will lowercase their DNS host name when registering SRV records.

If enabled, domain controllers will lowercase their DNS host name when registering domain controller SRV records.

If disabled, domain controllers will use their configured DNS host name as-is when registering domain controller SRV records.

If not configured, domain controllers will default to using their local configuration. The default local configuration is enabled.

More information is available at https://aka.ms/lowercasehostnamesrvrecord
      </string>

</stringTable>
    <presentationTable>
      <presentation id="Netlogon_BackgroundRetryInitialPeriod">
        <decimalTextBox refId="Netlogon_BackgroundRetryInitialPeriodLabel" defaultValue="600" spinStep="600">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_BackgroundRetryMaximumPeriod">
        <decimalTextBox refId="Netlogon_BackgroundRetryMaximumPeriodLabel" defaultValue="3600" spinStep="3600">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_BackgroundRetryQuitTime">
        <decimalTextBox refId="Netlogon_BackgroundRetryQuitTimeLabel" defaultValue="0" spinStep="100">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_BackgroundSuccessfulRefreshPeriod">
        <decimalTextBox refId="Netlogon_BackgroundSuccessfulRefreshPeriodLabel" defaultValue="4294967200" spinStep="1000">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_DebugFlag">
        <decimalTextBox refId="Netlogon_DebugFlagLabel" defaultValue="536936447">Level:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_DnsAvoidRegisterRecords">
        <textBox refId="Netlogon_DnsAvoidRegisterRecordsLabel">
          <label>Mnemonics:</label>
        </textBox>
      </presentation>
      <presentation id="Netlogon_DnsRefreshInterval">
        <decimalTextBox refId="Netlogon_DnsRefreshIntervalLabel" defaultValue="1800" spinStep="100">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_DnsTtl">
        <decimalTextBox refId="Netlogon_DnsTtlLabel" defaultValue="600" spinStep="100">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_ExpectedDialupDelay">
        <decimalTextBox refId="Netlogon_ExpectedDialupDelayLabel" defaultValue="0" spinStep="100">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_GcSiteCoverage">
        <textBox refId="Netlogon_GcSiteCoverageLabel">
          <label>Sites:</label>
        </textBox>
      </presentation>
      <presentation id="Netlogon_LdapSrvPriority">
        <decimalTextBox refId="Netlogon_LdapSrvPriorityLabel" defaultValue="0" spinStep="100">Priority:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_LdapSrvWeight">
        <decimalTextBox refId="Netlogon_LdapSrvWeightLabel" defaultValue="100" spinStep="100">Weight:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_MaximumLogFileSize">
        <decimalTextBox refId="Netlogon_MaximumLogFileSizeLabel" defaultValue="536936447">Bytes:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_NdncSiteCoverage">
        <textBox refId="Netlogon_NdncSiteCoverageLabel">
          <label>Sites:</label>
        </textBox>
      </presentation>
      <presentation id="Netlogon_NegativeCachePeriod">
        <decimalTextBox refId="Netlogon_NegativeCachePeriodLabel" defaultValue="45" spinStep="60">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_NonBackgroundSuccessfulRefreshPeriod">
        <decimalTextBox refId="Netlogon_NonBackgroundSuccessfulRefreshPeriodLabel" defaultValue="1800" spinStep="1000">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_ScavengeInterval">
        <decimalTextBox refId="Netlogon_ScavengeIntervalLabel" defaultValue="900" spinStep="900">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_SiteCoverage">
        <textBox refId="Netlogon_SiteCoverageLabel">
          <label>Sites:</label>
        </textBox>
      </presentation>
      <presentation id="Netlogon_SiteName">
        <textBox refId="Netlogon_SiteNameLabel">
          <label>Site:</label>
        </textBox>
      </presentation>
      <presentation id="Netlogon_ForceRediscoveryInterval">
        <decimalTextBox refId="Netlogon_ForceRediscoveryIntervalLabel" defaultValue="43200" spinStep="100">Seconds:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_AddressLookupOnPingBehavior">
        <decimalTextBox refId="Netlogon_AddressLookupOnPingBehaviorLabel" defaultValue="2" spinStep="1">Address lookup behavior:</decimalTextBox>
      </presentation>
      <presentation id="Netlogon_PingUrgencyMode">
        <decimalTextBox refId="Netlogon_PingUrgencyModeLabel" defaultValue="2" spinStep="1">Ping urgency mode:</decimalTextBox>
      </presentation>
    </presentationTable>
  </resources>
</policyDefinitionResources>

${this.title}

Code Editor : Netlogon.adml