MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic.

MSS: (NoDefaultExempt) Configure IPSec exemptions for various types of network traffic.


Supported on: At least Windows Vista
NoDefaultExempt


  1. Allow all exemptions (least secure).
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSystem\CurrentControlSet\Services\IPSEC
    Value NameNoDefaultExempt
    Value TypeREG_DWORD
    Value0
  2. Multicast, broadcast, & ISAKMP exempt (best for Windows XP).
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSystem\CurrentControlSet\Services\IPSEC
    Value NameNoDefaultExempt
    Value TypeREG_DWORD
    Value1
  3. RSVP, Kerberos, and ISAKMP are exempt.
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSystem\CurrentControlSet\Services\IPSEC
    Value NameNoDefaultExempt
    Value TypeREG_DWORD
    Value2
  4. Only ISAKMP is exempt (recommended for Windows Server 2003).
    Registry HiveHKEY_LOCAL_MACHINE
    Registry PathSystem\CurrentControlSet\Services\IPSEC
    Value NameNoDefaultExempt
    Value TypeREG_DWORD
    Value3


mss-legacy.admx

Administrative Templates (Computers)