Multi-Provider Router (MPR) notifications

Question

I need help on two GPOs.

1. If I disable the policy below, will there be any impact besides issues with mapped network drives?

Policy: Enable MPR notifications for the system --> Disabled

Location: Computer Configuration\Policies\Administrative Templates\Windows Components\Windows Logon Options\Enable MPR notifications for the system

Impact: Users might face issues with the automatic reconnection of mapped network drives after logging in. They may need to reconnect manually or provide credentials again.

2. Is the policy below related to LAPS as i dont use LAPS in my infrastructure, and will there be any impact from disabling it?

Policy: Allow Custom SSPs and APs to be loaded into LSASS --> Disabled

Location: Computer Configuration\Policies\Administrative Templates\System\Local Security Authority\Allow Custom SSPs and APs to be loaded into LSASS

Answer 1

Hello,

Let’s break down the impact of these two Group Policy Objects (GPOs):

1. Enable MPR notifications for the system

Current Setting: Disabled

Impact:

As you mentioned, disabling this policy can cause issues with the automatic reconnection of mapped network drives after users log in. Users might need to manually reconnect their drives or re-enter their credentials.

Besides this, there shouldn’t be any other significant impacts. This policy specifically deals with Multiple Provider Router (MPR) notifications, which are primarily related to network drive mappings.

2. Allow Custom SSPs and APs to be loaded into LSASS

Current Setting: Disabled

Relation to LAPS:

This policy is not directly related to Local Administrator Password Solution (LAPS). LAPS manages local administrator passwords, while this policy controls the loading of custom Security Support Providers (SSPs) and Authentication Packages (APs) into the Local Security Authority Subsystem Service (LSASS).

Impact:

Disabling this policy prevents custom SSPs and APs from being loaded into LSASS. If you are not using any custom SSPs or APs in your infrastructure, there should be no impact from disabling this policy.

I hope the information above is helpful.

Best Regards,

Yanhong Liu

============================================

If the Answer is helpful, please click "Accept Answer" and upvote it.

Answer 2

If this policy implement on domain controllers OU than what could be the possible impact ..it will impact all AD users or Users who logged in DC only , as i understand MPR notifications will be stopped for registered cred manager and network provider