Solved

How to use NTLM authentication instead of LM ?

Posted on 2009-07-08
4
1,777 Views
Last Modified: 2013-12-04
I want can for all my network (Win 2000; Win 2003; XP Pro) stop the use of LN and use NTLM or later.

what is necessery change in registre for this ?
and I want can deploy this by sms in quiet mode.
0
Comment
Question by:thierry91
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 5

Assisted Solution

by:richy92
richy92 earned 100 total points
ID: 24802159
I think you should be able to do this with a group policy - in computer config, windows settings, security settings, local policies, security options there is a setting : network security:lan manager authentication level - here you can choose the authentication level.

This is what the explanation says :

Network security: LAN Manager authentication level

This security setting determines which challenge/response authentication protocol is used for network logons. This choice affects the level of authentication protocol used by clients, the level of session security negotiated, and the level of authentication accepted by servers as follows:
0
 
LVL 8

Assisted Solution

by:Milan_Ojh
Milan_Ojh earned 100 total points
ID: 24802825
Check the below mentioned link it may help you out:

http://support.microsoft.com/kb/239869

cheers
0
 
LVL 38

Assisted Solution

by:Rich Rumble
Rich Rumble earned 100 total points
ID: 24802936
Level 5 is the only one that uses ntlmv2 exclusively, however Vista/2008/Windows 7 are all set to level-3 by default. This is the most compatible for most domains without causing issues. This can affect Samba and even M$'s own BITS protocol so please test before making a switch.
-rich
0
 
LVL 1

Accepted Solution

by:
Joffer earned 200 total points
ID: 24815398
How do I check the NTLM authentication Setting?

http://www.nbtnet.newboundary.com/support/docs/ppm/ppm/troubleshooting/tasks/ppm0114.htm

This page shows how to do it locally. Shouldn't be difficult to adopt it for a GPO on the domain.
0

Featured Post

Independent Software Vendors: We Want Your Opinion

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
active directory 5 65
Compromised PC? 17 250
Propagate Applocker rules to all laptops/PCs in the domain 10 51
Department of Defense formating 3 25
The term "Bad USB" is a buzz word that is usually used when talking about attacks on computer systems that involve USB devices. In this article, I will show what possibilities modern windows systems (win8.x and win10) offer to fight these attacks wi…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…
In an interesting question (https://www.experts-exchange.com/questions/29008360/) here at Experts Exchange, a member asked how to split a single image into multiple images. The primary usage for this is to place many photographs on a flatbed scanner…

740 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question