Take the 2-minute tour ×
Server Fault is a question and answer site for professional system and network administrators. It's 100% free, no registration required.

I run a AD server with Windows 2008, I have clients running XP and Windows 7, now I've decided to enforce Lan Manager authentication by refusing LM & NTLMv1 encryption methood, would it be risky? (I mean incompatibility)

And was LM hashes persistent or one-time storage? If it's persistent, would it be converted automatically (or with user interaction)?

share|improve this question

1 Answer 1

up vote 3 down vote accepted

Your question is pretty strangely worded, but it sounds like what you actually want to do is disable LM and NTLMv1. If this is the case, I'd say you're probably fine and that's a reasonable thing to do, leaving you with NTLMv2 and Kerberos.

NTLMv2 has been supported since NT4 SP2/2000.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.