The domain I'm working on currently has NTLM V1 enabled for Domain Controllers. I've done some tests and discovered that only a few application servers require NTLM V1. Unfortunately I have to allow those servers to continue using NTLM V1 for authentication to Domain Controllers.
I would like to restrict all other servers to only using NTLM V2, Kerberos, etc.
I see that Group Policy has some options under "Network security: Restrict NTLM". But these options look like they restrict both NTLM V1 and NTLM V2. There are still many servers that require NTLM V2.
Is there a good way to restrict NTLM V1 to only a few select servers, while allowing NTLM V2 on many others?
Is there a way to apply the deny NTLM V1 option on our Domain Controller's GPO but allow these few servers to use NTLM V1 via WMI Filters?