Solved

Mixed NTLM and Kerbose logins from Servers

Posted on 2011-09-19
3
327 Views
Last Modified: 2012-06-21
I have a Windows 2008 Active Directory enviroment with mostly Windows 2008 and 2008 R2 servrers. I only have about 12 2003 servers remained. I have noticed on one of my members servers which is a Jboss webserver for a custom app, I saw users authentication to the domain using NTLM instead of Kerbose. The login type is listed a 3. Why isn't kerbose authenticaion being used. The member server in question is running 2003
0
Comment
Question by:compdigit44
3 Comments
 
LVL 59

Accepted Solution

by:
Darius Ghassem earned 500 total points
ID: 36560670
Could be the software itself requesting NTLM
0
 
LVL 19

Expert Comment

by:Miguel Angel Perez Muñoz
ID: 36560706
Your domain is 2008R2? this may caused because DC are not supporting DES by default on 2008R2 machines: http://technet.microsoft.com/en-us/library/dd560670(WS.10).aspx

You must to enable DES-CBC-MD5 and/or DES-CBC-CRC on 2008 servers to maintain compatibility with 2003 versions.
0
 
LVL 19

Author Comment

by:compdigit44
ID: 36561504
My DC's are only 2008 NOT R2. How can I tell what is requested the NTLM authentcation instead of using kerbose?
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
Last week, our Skyport webinar on “How to secure your Active Directory” (https://www.experts-exchange.com/videos/5810/Webinar-Is-Your-Active-Directory-as-Secure-as-You-Think.html?cid=Gene_Skyport) provided 218 attendees with a step-by-step guide for…
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will show how to configure a single USB drive with a separate folder for each day of the week. This will allow each of the backups to be kept separate preventing the previous day’s backup from being overwritten. The USB drive must be s…

778 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question