This controls whether the client offers or even demands the use of the netlogon schannel.
no does not offer the schannel,
auto offers the schannel but does not
enforce it, and yes denies access
if the server is not able to speak netlogon schannel.
Note that for active directory domains this is hardcoded to
yes.
This option yields precedence to the option.
auto
yes