This controls whether the client offers or even demands the use of the netlogon schannel. no does not offer the schannel, auto offers the schannel but does not enforce it, and yes denies access if the server is not able to speak netlogon schannel. auto yes