Setting the policy to Enabled skips CNAME lookup. The server name is used as entered when generating the Kerberos SPN.
Setting the policy to Disabled or leaving it unset means CNAME lookup determines the canonical name of the server when generating the Kerberos SPN.
| Registry Hive | HKEY_LOCAL_MACHINE or HKEY_CURRENT_USER |
| Registry Path | Software\Policies\Google\Chrome |
| Value Name | DisableAuthNegotiateCnameLookup |
| Value Type | REG_DWORD |
| Enabled Value | 1 |
| Disabled Value | 0 |