NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.
Questions tagged [ntlm]
179 questions
43
votes
5 answers
Why use Kerberos instead of NTLM in IIS?
This is something that I've never really been able to answer as well as I like: What is the real advantage of using Kerberos authentication in IIS instead of NTLM?
I've seen a lot of people really struggle to get it set up (myself included) and I…
![](../../users/profiles/67732.webp)
Infotekka
- 545
- 1
- 5
- 6
40
votes
4 answers
RDP error "The function requested is not supported" after enabling NLA
I'm trying to RDP into one of my servers, which as Network Level Authentication Enabled as well as NTLMv2 being forced. This worked fine until the server had to reboot for updates. Now, I cannot RDP into my server anymore. I get this error trying to…
![](../../users/profiles/317356.webp)
Freek
- 521
- 1
- 4
- 6
17
votes
8 answers
How do you find out if Active Directory is using Kerberos or NTLM?
Is there a command line program you can use?
![](../../users/profiles/10717.webp)
LeWoody
- 299
- 1
- 2
- 8
12
votes
6 answers
How can I check if my IIS site is using NTLM or Kerberos?
How can I check if my IIS site is using NTLM or Kerberos? And how can I change authentication from Kerberos to NTLM? I'm using IIS 7.5.
![](../../users/profiles/345146.webp)
KlimczakM
- 223
- 1
- 2
- 7
9
votes
3 answers
apt-get through NTLM authenticated proxy
I must be missing something... I could swear I've done this before but I've torched the VM's that I was using previously.
How do you get apt-get to authenticate through a proxy that only supports NTLM? Do I need to change my proxy config to also…
![](../../users/profiles/1054.webp)
squillman
- 37,618
- 10
- 90
- 145
8
votes
3 answers
How do I log authentication attempts with samba?
I have users authenticating with squid (NTLM) to an Active Directory server using Samba 3.5.4 and I'd like to log users' login attempts.
I'd like a line showing something like:
TIMESTAMP username@DOMAIN SUCCESS/FAILURE
![](../../users/profiles/1598.webp)
Harley
- 2,177
- 6
- 25
- 29
8
votes
1 answer
IIS7 Windows Authentication Providers
Does anyone know what the different windows authentication providers for IIS7 means. There are 3 available providers
NTLM
Negotiate
Negotiate:Kerberos
NTLM is pretty obvious I think its NTLM and Negotiate is that Kerberos if so then what is…
![](../../users/profiles/18219.webp)
Satish
- 227
- 3
- 4
- 9
7
votes
2 answers
NetApp erroring with: STATUS_NOLOGON_WORKSTATION_TRUST_ACCOUNT
Since a sitewide upgrade to Windows 7 on desktop, I've started having a problem with virus checking.
Specifically - when doing a rename operation on a (filer hosted) CIFS share. The virus checker seems to be triggering a set of messages on the…
![](../../users/profiles/216511.webp)
Sobrique
- 3,697
- 2
- 14
- 34
7
votes
1 answer
Password Authentication Fails - NTLMv2
Environment:
Windows 2000 sp4 EDIT: Domain Controller with no trust setup with the Win2008 Server
Windows XP machines
Windows 2008 Server
Netapp NAS
Problem:
We have a shared folder that resides on a NAS using a Windows 2008 AD for the…
![](../../users/profiles/120529.webp)
JMeterX
- 3,387
- 15
- 31
6
votes
2 answers
Looking for a lightweight NTLM HTTP proxy server
For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "CNTLM" does).
What is the easiest way to create an…
![](../../users/profiles/140833.webp)
Rich
- 626
- 11
- 28
6
votes
2 answers
ntlm_auth - can login in AD with both old and new passwords
I have problem with AD and ntlm_auth. I use the following command, to query the AD server for checking the user existence:
ntlm_auth --use-cached-creds --username=SOME_USER --password=SOME_PASS --domain=SOME_DOMAIN
But the thing is, when I change…
![](../../users/profiles/134633.webp)
0xmtn
- 360
- 3
- 15
5
votes
3 answers
Check Primary Authentication Protocol for Active Directory (NTLM or Kerberos?)
How can I check, from a client machine (in Global Group)(also is local admin), whether the domain controller is authenticating my login request to the domain using NTLM or Kerberos?
I know that Kerberos is enabled by default, but the domain Admin…
![](../../users/profiles/281157.webp)
Andrew Watson
- 53
- 1
- 1
- 3
5
votes
2 answers
March 10th Patch Tuesday appears to cause SQL Server client connection problems
Since applying the full set of patches on a Win 7.1 Pro desktop and a Windows 2012 R2 Datacenter Azure server running SQL 2014, SQL Management Studio (2008 and 2014 versions) won't connect to the SQL 2014 Azure server. The client connection attempt…
![](../../users/profiles/276119.webp)
Spike
- 51
- 1
- 3
5
votes
1 answer
"Anonymous Logon" vs "NTLM V1" What to disable?
Working on getting rid of NTLM V1 logins all together in the AD environment; found lot of events, almost all of them from the user "Anonymous Logon"(4624 events) other 1(4624 events) percent coming from some users. So, here I have some…
![](../../users/profiles/145496.webp)
Darktux
- 827
- 5
- 20
- 36
5
votes
1 answer
Does IIS NTLM/Kerberos authentication still work with an offline domain controller?
We have multiple IIS instances spread across remote regional branches. Each IIS instance (v.7.5) is running the same application and authenticates its users with Integrated Authentication (NTLM in the providers list).
A few branches get frequently…
![](../../users/profiles/173400.webp)
Starbuck3000
- 101
- 1
- 4