is this document outdated?

Question

hi, i see this document:

https://learn.microsoft.com/en-us/windows/win32/com/legacyauthenticationlevel

it says it is not recommended to modify LegacyAuthenticationLevel via registry, and better do it via Process-Wide Security.

thing is after CVE-2021-26414 and KB5004442

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2021-26414

https://support.microsoft.com/en-us/topic/kb5004442-manage-changes-for-windows-dcom-server-security-feature-bypass-cve-2021-26414-f1400b52-c141-43d2-941e-37ed901c769c

the value is set to PacketIntegrity by default

my question is, is it still not recommended to set it via registry?

thanks,

Answer 1

Hi,

According to KB5004442, you need to set the registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Ole\AppCompat\RequireIntegrityActivationAuthenticationLevel however it is still not recommended to change the value LegacyAuthenticationLevel.

Best Regards,

Ian Xue

---

If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.