Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Anyone know if are there any real authentication differences between connecting using Name or IP in Active Directory environment. The environment is standard and well configured.

share|improve this question
3  
You can't connect to a DFS share by IP, so that's a difference right there... –  Chris S Oct 10 '13 at 13:03

2 Answers 2

up vote 8 down vote accepted

IP address = NTLM only.
Kerberos uses names.

Kerberos is not used when you connect to SMB shares by using IP address
http://support.microsoft.com/kb/322979

"When a client uses Kerberos to authenticate itself to a server, the client requests a session ticket for the Service Principal Name (SPN). IP addresses are not names, so Kerberos is not used. After this occurs, the server goes through the list of the other supported security providers."

share|improve this answer
    
I was looking for this answer , thanks :) –  POLLOX Oct 10 '13 at 13:41

Your question is rather broad, but it's generally considered poor practice to use IP addresses for anything like file shares or print shares when you have a functioning DNS environment.

share|improve this answer

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.