SpecialNetShare

Sets various special feature options related to the Nomad share.

Registry value

Default value

Notes

Installer property

SpecialNetShare

0x2060 (8288)

You can set more than one option at the same time by combining the bit values. For example, to have custom share permissions and use the machine account for access to the Nomad share, set the value for SpecialNetShare to 129 (decimal value 1+128 or 0x0081 hex). See for more detail on configuration and security.

The default value in different versions has changed, based on feedback. Upgrading does not change the value unless explicitly set.

Nomad version

Default in MSI

Nomad 8.0 (1E Client 8.0)

0x2060 (8288)

  • Bit 5: Disables broadcast of download statistics

  • Bit 6: Enable Nomad FanOut

  • Bit 13: Use HTTP/S or SMB

The default used in all versions of Client Deployment Assistant (and earlier Endpoint Agent Installer) is 0x2070 (8304):

  • Bit 4: Enable Nomad hidden share as NomadSHR$

  • Bit 5: Disables broadcast of download statistics

  • Bit 6: Enable Nomad FanOut

  • Bit 13: Use HTTP/S or SMB

MODULE.NOMAD.SPECIALNETSHARE

 

Bit

Hex

Decimal

Description

 

0x0000

0

No special features enabled.

0

0x0001

1

Custom share permissions: Administrators configure and manage custom share permissions. The service doesn't create the NomadSHR share on start-up, leaving the administrator to manually create it and set the permissions. It is also not deleted when the service stops and therefore existing share permissions are preserved.

1

0x0002

2

Enables support for IPv6: If the network supports both IPv6 and IPv4, enable support for both – set bit 1 but not bit 2.

2

0x0004

4

Disables support for IPv4: If the network supports only IPv6, disable IPv4 and set both bit 1 and bit 2.

3

0x0008

8

RESERVED

4

0x0010

16

The Nomad share is hidden and named NomadSHR$. When using a hidden share, all Nomad installations must be configured to use this option. See The Nomad share for more detail on configuration and security.

5

0x0020

32

Disables broadcast of download statistics. By default, this is disabled. If enabled, Nomad broadcasts download statistics to all peers when a download is complete.

Note

Prior to 1E Client 4.1 (Nomad 7.0) this was enabled (0) by default, now it is disabled (1) by default.

6

0x0040

64

Enables Nomad FanOut.

7

0x0080

128

The machine account is used when connecting to a peer client. The SMSNomadP2P& account is not created. Please refer to The Nomad share.

Note

Will not work if peers exist in untrusted domains or workgroups.

8

0x0100

256

RESERVED

9

0x0200

512

RESERVED

10

0x0400

1024

RESERVED

13

0x2000

8192

Use HTTP/S or SMB. Ensure that this is set if Nomad integration is used by 1E. HTTP/S is automatically used if CM client is detected.

Note

Prior to 1E Client 4.1 (Nomad 7.0) this was disabled (0) by default, now it is enabled (1) by default.

This setting should be enabled in baseline or other policies.

14

0x4000

16384

Web LSZ generation: enables the Nomad client on Configuration Manager standalone DPs to handle LSZ file generation requests coming from HTTP/HTTPS enabled clients.

Used when Nomad clients are configured with either of the following enabled:

  • Bit13 (0x2000) – Use HTTP/S or SMB

  • Bit 15 (0x8000) – Use HTTP/S only, not SMB

When enabled, the Nomad distribution point client creates a virtual folder called LSZFILES. The permissions for this are copied from the Configuration Manager SMS_DP_SMSPKGX$ share. By default, access to the LSZFILES folder requires SSL to be enabled. This is the case for Internet facing scenarios where local client access certificates will ensure authentication. If you are using HTTP instead of HTTPS, manually disable SSL on the LSZFILES web folder in order for the Nomad LSZ file generation process to work.

Only needs to be enabled when using HTTP or HTTPS on standalone DPs; it is not required on site server DPs because Nomad automatically configures Web LSZ generation on them.

15

0x8000

32768

Use HTTP/S only, not SMB: enables the Nomad client to download content using HTTPS or HTTP depending on the content location provided by Configuration Manager or 1E. The Nomad client will not use SMB to download content when this is enabled.