Restricts Nomad LSZ file generation requests to a list of permitted package source locations.
Registry valueDefault valueNotesInstaller property

A list of comma-separated package source locations. Enables increased security and is only used by the Nomad client installed on a distribution point. INomad LSZ file generation requests will only be completed if the content location is listed. If you are using additional package source locations, you must manually add these to this registry value.

PermittedLSZShares can incorporate wildcard characters to provide flexible naming convention support.

If you leave the registry value blank, security checks on package source locations are not carried out.

When Configuration Manager (specifically Distribution Point servers) isĀ configured to use HTTPS only, you must also add NOCERT_SMS_DP_SMSPKG*$ and CCMTOKENAUTH_SMS_DP_SMSPKG*$ to the PermittedLSZShares registry value.