KB17892 - Configure a Host Checker policy based on Domain Membership

This article provides step-by-step instructions how to configure a Host Checker policy based on Domain Membership.

For Windows XP:

1. Navigate to Endpoint Security > Host Checker
2. Under Policies, click New Policy and provide a name for the policy
3. Select Custom: Registry Setting
4. The Registry Root key will be HKEY_LOCAL_MACHINE.
5. Registry Subkey will be

SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\DomainCache

5. Name will be { variable DOMAIN }
6. Type will be String.
7. Value will be {FQDN of domain}
8. Click Save Changes
9. The full path of the registry will be

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon\
DomainCache\

 

For Windows 7/Vista:

1. Navigate to Endpoint Security > Host Checker
2. Under Policies, click New Policy and provide a name for the policy.
3. Select Custom: Registry Setting.
4. Registry Subkey will be Volatile Environment.
5. Name will be USERDNSDOMAIN.
6. Type will be String.
7. Value will be {FQDN of domain}
8. Click Save Changes
9. The full path of the registry key will be

HKEY_CURRENT_USER\Volatile Environment\USERDNSDOMAIN

 

For Windows 10:

1. Navigate to Endpoint Security > Host Checker.
2. Under Policies, click New Policy and provide a name for the policy
3. Select Custom: Registry Setting
4. The Registry Root key will be HKEY_LOCAL_MACHINE
5. Registry Subkey will be System\CurrentControlSet\Services\Tcpip\Parameters
6. Name will be NV Domain
7. Value will be {FQDN of domain}
8. Click Save Changes
9. The full path of the registry key will be 

HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Tcpip\Parameters\
NV Domain

 
Apply the Host Checker policy at the realm or role level as per your requirement.