News, tips, advice, support for Windows, Office, PCs & more. Tech help. No bull. We're community supported by donations from our Plus Members, and proud of it
Home icon Home icon Home icon Email icon RSS icon
  • NTLM authentication

    Posted on Simon_Weel Comment on the AskWoody Lounge

    Home Forums Admin IT Lounge NTLM authentication

    Viewing 1 reply thread
    • Author
      • #2287594 Reply
        AskWoody Plus

        A recurring entry in the Event logs is this one: Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server.

        The accompanying link is to a page explaining a very labour-intensive job on how to create audit logs to figure out what applications actually use NTLM. Did some searching on the topic, but just about every site explaining how to get rid of NTLM use the same procedures; just disabling NTLM can be disastrous. Nice foresight. Thing is; I have no clue what to look for? I enabled the proposed Audits and looked at the results. And they make little sense.

        We have a pretty bog-standard Windows domain with Windows 10 clients and a Hyper-V 2016 server with two VM’s running Windows server 2016. One as Domain controller / Files Server and one for Exchange 2016. Applications we use are Office 2019 and Autodesk AEC Collection.

        Looks pretty ‘modern’ to me so I wonder what would happen if I just disable NTLM. And if this will cause major havoc, then would one even consider switching off NTLM?


      • #2287818 Reply
        Paul T
        AskWoody MVP

        You can turn it off, but can you afford to be without some services if it stops things working?
        Running NTLM isn’t really an issue if your network is secure. I assume you have it isolated from the internet?

        Can you post some of the audit log for us to check? Remove sensitive data first.

        cheers, Paul

    Viewing 1 reply thread

    Please follow the -Lounge Rules- no personal attacks, no swearing, and politics/religion are relegated to the Rants forum.

    Reply To: NTLM authentication

    You can use BBCodes to format your content.
    Your account can't use Advanced BBCodes, they will be stripped before saving.