Server Fault Stack Exchange
Server Fault Stack Exchange

Questions tagged [ntlm]

NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.

179 questions
43
votes
5 answers

Why use Kerberos instead of NTLM in IIS?

This is something that I've never really been able to answer as well as I like: What is the real advantage of using Kerberos authentication in IIS instead of NTLM? I've seen a lot of people really struggle to get it set up (myself included) and I…
Infotekka
  • 545
  • 1
  • 5
  • 6
40
votes
4 answers

RDP error "The function requested is not supported" after enabling NLA

I'm trying to RDP into one of my servers, which as Network Level Authentication Enabled as well as NTLMv2 being forced. This worked fine until the server had to reboot for updates. Now, I cannot RDP into my server anymore. I get this error trying to…
Freek
  • 521
  • 1
  • 4
  • 6
17
votes
8 answers

How do you find out if Active Directory is using Kerberos or NTLM?

Is there a command line program you can use?
LeWoody
  • 299
  • 1
  • 2
  • 8
12
votes
6 answers

How can I check if my IIS site is using NTLM or Kerberos?

How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5.
KlimczakM
  • 223
  • 1
  • 2
  • 7
9
votes
3 answers

apt-get through NTLM authenticated proxy

I must be missing something... I could swear I've done this before but I've torched the VM's that I was using previously. How do you get apt-get to authenticate through a proxy that only supports NTLM? Do I need to change my proxy config to also…
squillman
  • 37,618
  • 10
  • 90
  • 145
8
votes
3 answers

How do I log authentication attempts with samba?

I have users authenticating with squid (NTLM) to an Active Directory server using Samba 3.5.4 and I'd like to log users' login attempts. I'd like a line showing something like: TIMESTAMP username@DOMAIN SUCCESS/FAILURE
Harley
  • 2,177
  • 6
  • 25
  • 29
8
votes
1 answer

IIS7 Windows Authentication Providers

Does anyone know what the different windows authentication providers for IIS7 means. There are 3 available providers NTLM Negotiate Negotiate:Kerberos NTLM is pretty obvious I think its NTLM and Negotiate is that Kerberos if so then what is…
Satish
  • 227
  • 3
  • 4
  • 9
7
votes
2 answers

NetApp erroring with: STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT

Since a sitewide upgrade to Windows 7 on desktop, I've started having a problem with virus checking. Specifically - when doing a rename operation on a (filer hosted) CIFS share. The virus checker seems to be triggering a set of messages on the…
Sobrique
  • 3,697
  • 2
  • 14
  • 34
7
votes
1 answer

Password Authentication Fails - NTLMv2

Environment: Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server Windows XP machines Windows 2008 Server Netapp NAS Problem: We have a shared folder that resides on a NAS using a Windows 2008 AD for the…
JMeterX
  • 3,387
  • 15
  • 31
6
votes
2 answers

Looking for a lightweight NTLM HTTP proxy server

For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "CNTLM" does). What is the easiest way to create an…
Rich
  • 626
  • 11
  • 28
6
votes
2 answers

ntlm_auth - can login in AD with both old and new passwords

I have problem with AD and ntlm_auth. I use the following command, to query the AD server for checking the user existence: ntlm_auth --use-cached-creds --username=SOME_USER --password=SOME_PASS --domain=SOME_DOMAIN But the thing is, when I change…
0xmtn
  • 360
  • 3
  • 15
5
votes
3 answers

Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?)

How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos? I know that Kerberos is enabled by default, but the domain Admin…
Andrew Watson
  • 53
  • 1
  • 1
  • 3
5
votes
2 answers

March 10th Patch Tuesday appears to cause SQL Server client connection problems

Since applying the full set of patches on a Win 7.1 Pro desktop and a Windows 2012 R2 Datacenter Azure server running SQL 2014, SQL Management Studio (2008 and 2014 versions) won't connect to the SQL 2014 Azure server. The client connection attempt…
Spike
  • 51
  • 1
  • 3
5
votes
1 answer

"Anonymous Logon" vs "NTLM V1" What to disable?

Working on getting rid of NTLM V1 logins all together in the AD environment; found lot of events, almost all of them from the user "Anonymous Logon"(4624 events) other 1(4624 events) percent coming from some users. So, here I have some…
Darktux
  • 827
  • 5
  • 20
  • 36
5
votes
1 answer

Does IIS NTLM/Kerberos authentication still work with an offline domain controller?

We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the providers list). A few branches get frequently…
Starbuck3000
  • 101
  • 1
  • 4
1
2 3
…
11 12