Solved

How to use NTLM authentication instead of LM ?

Posted on 2009-07-08
4
1,794 Views
Last Modified: 2013-12-04
I want can for all my network (Win 2000; Win 2003; XP Pro) stop the use of LN and use NTLM or later.

what is necessery change in registre for this ?
and I want can deploy this by sms in quiet mode.
0
Comment
Question by:thierry91
[X]
Welcome to Experts Exchange

Add your voice to the tech community where 5M+ people just like you are talking about what matters.

  • Help others & share knowledge
  • Earn cash & points
  • Learn & ask questions
4 Comments
 
LVL 5

Assisted Solution

by:richy92
richy92 earned 100 total points
ID: 24802159
I think you should be able to do this with a group policy - in computer config, windows settings, security settings, local policies, security options there is a setting : network security:lan manager authentication level - here you can choose the authentication level.

This is what the explanation says :

Network security: LAN Manager authentication level

This security setting determines which challenge/response authentication protocol is used for network logons. This choice affects the level of authentication protocol used by clients, the level of session security negotiated, and the level of authentication accepted by servers as follows:
0
 
LVL 8

Assisted Solution

by:Milan_Ojh
Milan_Ojh earned 100 total points
ID: 24802825
Check the below mentioned link it may help you out:

http://support.microsoft.com/kb/239869

cheers
0
 
LVL 38

Assisted Solution

by:Rich Rumble
Rich Rumble earned 100 total points
ID: 24802936
Level 5 is the only one that uses ntlmv2 exclusively, however Vista/2008/Windows 7 are all set to level-3 by default. This is the most compatible for most domains without causing issues. This can affect Samba and even M$'s own BITS protocol so please test before making a switch.
-rich
0
 
LVL 1

Accepted Solution

by:
Joffer earned 200 total points
ID: 24815398
How do I check the NTLM authentication Setting?

http://www.nbtnet.newboundary.com/support/docs/ppm/ppm/troubleshooting/tasks/ppm0114.htm

This page shows how to do it locally. Shouldn't be difficult to adopt it for a GPO on the domain.
0

Featured Post

Technology Partners: We Want Your Opinion!

We value your feedback.

Take our survey and automatically be enter to win anyone of the following:
Yeti Cooler, Amazon eGift Card, and Movie eGift Card!

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Title # Comments Views Activity
Windows 10 4 103
Error login w2012 domain 6 111
Using icacls to block access to mstsc, cmd & PowerShell 4 178
No IP Address Assigned to VM 10 155
No security measures warrant 100% as a "silver bullet". The truth is we also cannot assume anything but a defensive and vigilance posture. Adopt no trust by default and reveal in assumption. Only assume anonymity or invisibility in the reverse. Safe…
In a recent article here at Experts Exchange (http://www.experts-exchange.com/articles/18880/PaperPort-14-in-Windows-10-A-First-Look.html), I discussed my nine-month sandbox testing of the Windows 10 Technical Preview, specifically with respect to r…
Two types of users will appreciate AOMEI Backupper Pro: 1 - Those with PCIe drives (and haven't found cloning software that works on them). 2 - Those who want a fast clone of their boot drive (no re-boots needed) and it can clone your drive wh…

734 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question