PermittedLSZShares

Restricts Nomad LSZ file generation requests to a list of permitted package source locations.

Registry value

Default value

Notes

Installer property

PermittedLSZShares

SMSPKG*$

SMS_DP_SMSPKG*$

A list of comma-separated package source locations. Enables increased security and is only used by the Nomad client installed on a distribution point. Nomad LSZ file generation requests will only be completed if the content location is listed. If you are using additional package source locations, you must manually add these to this registry value.

PermittedLSZShares can incorporate wildcard characters to provide flexible naming convention support.

If you leave the registry value blank, security checks on package source locations are not carried out.

Note

When Configuration Manager (specifically Distribution Point servers) is configured to use HTTPS only, you must also add NOCERT_SMS_DP_SMSPKG*$ and CCMTOKENAUTH_SMS_DP_SMSPKG*$ to the PermittedLSZShares registry value.

MODULE.NOMAD.PERMITTEDLSZSHARES