as a part of effort to integrate buffalo NAS terrastation pro with our AD, we found out that following changes need to be made in the Group policy;
The following need to be altered in Domain-> Windows Setttings->Security Settings->Local Policies-> Security Options.
Microsoft Network Server: Digitally Sign Communications(always) (Needs to be Disabled, currently its Not Defined)
Network Security: Lan Manager Authentication Level(needs to be altered from Not Defined to Ntlm2 negotiate if needed)
My questions are , is it worthy/risky to change the policy for the domain for couple of NAS servers?
Second one , can they be changed on the individual DC's(probably via SECPOL) since we will be pointing the NAs to only 1 DC?