Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Where can I check in Windows Server 2008 that Kereberos/NTLM is the authentication protocol used after the whole network is set up/installed. There is only 1 domain controller with AD services and is not affiliated with any other domains.

Balaji S

share|improve this question
fyi, Kerberos and NTLM are two separate protocols. – grawity May 6 '10 at 19:34

If they are using AD, they are using Kerberos by default. I think that was pretty much answered in your other question. However, also by default, if Kerberos is blocked or failing, the systems will fail back to NTLM unless that is disabled via GPO - which it should be, it's recommended.

You could also fire up Wireshark and sniff the network traffic and see what protocols are going out during authentication.

If you're having problems make your application work with some AD domains and not others, have you set up a test lab? If this is for a commercial product, maybe it would be worth your company's time and money to actually hire or contract an MCSE / MCITP to come in and set up the lab and do some compatibility testing with you?

I don't want to discourage you from asking questions here, but it might be better if you explained a full scenario of what you're doing, what you're expecting and what is actually happening. A full detailed big-picture view - more details than a simplified overview, but more general than asking for one small piece of information.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.