Lsass

Setting Name Description
DomainSeparator

Character used to designate the domain name separator.

Default Value: \\

SpaceReplacement

Character used to designate space characters in names of objects.

Default Value: ^

EnableEventlog

Configure lsass to log events to the event log.

Default Value: false

LogInvalidPasswords Configure lsass to log events for failed authentication attempts due to invalid passwords.
SaslMaxBufSize

Size of the buffer to allocate for decoding incoming LDAP responses (bytes).

Default Value: 16777215

Providers

Configure which lsass providers to load.

Default Value: ActiveDirectory