Cisco Cisco TelePresence Video Communication Server Expressway
Appendix 5 — Active Directory (direct): Movi PC and AD server compatibility configuration
VCS Deployment Guide: Device authentication on Cisco VCS (VCS X7.1)
Page 28 of 47
Appendix 5 — Active Directory (direct): Movi
PC and AD server compatibility configuration
PC and AD server compatibility configuration
LMCompatibility level for Movi and the AD server
LMCompatibility level is set both on clients (e.g. Movi PC) and the Domain Controller hosting the
Active Directory server. It is important that the values selected on the Movi PC are compatible with the
value set on the AD database Domain Controller.
Active Directory server. It is important that the values selected on the Movi PC are compatible with the
value set on the AD database Domain Controller.
The meanings of the values in LmCompatibilityLevel are explained in
Movi client PC
Level
Client sends
LM
NTLM
NTLM 2
NTLM2 security
(if negotiated)
0
-
-
1
-
2
-
-
3
-
-
4
-
-
5
-
-
AD Domain Controller
Level
DC accepts
LM
NTLM
NTLM 2
0
1
2
3
4
-
5
-
-
Compatibilities
AD Domain Controller Level
Movi client PC
0, 1, 2, 3, 4
0, 1, 2, 3, 4, 5
5
3, 4, 5
The setting called “LmCompatibilityLevel” can be found in the Windows registry.
Using regedit, go to My Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
The key is called LmCompatibilityLevel (REG_DWORD)