Questions tagged [ntlm]
NTLM (NT LAN Manager) is a suite of Microsoft security protocols that provides authentication, integrity, and confidentiality to users.
166
questions
4
votes
1answer
78 views
Hardening a file-serving Windows Server 2019 instance
I'm in the process of re-configuring and securing a server for the small company that I work for. We use it to store design files and other data with Autodesk Vault. It's running on a VPS from a ...
0
votes
0answers
31 views
Default for lmcompatibilitylevel if it doesn't exist
If the registry item lmcompatibilitylevel in HKLM\System\CurrentControlSet\Control\Lsa does not exist, when I look at the local policy Network Security:LAN Mananager authentication level, it shows '...
1
vote
1answer
74 views
NTLM authentication and non-domain joined computers accessing shares on a domain
I have a non-domain joined Win 10 computer which accesses shares on a domain joined Win 2016 server. At first connection with one of these shares, the Win 10 client is challenged and I supply domain ...
0
votes
0answers
33 views
IIS / PHP not passing (or passing incorrect) NTLM user information
I am currently migrating PHP applications from IIS 8.0 to IIS 10.0. NTLM/Windows Authentication has been installed through Server Manager, the scripts are running on PHP7.1, are using exactly the same ...
0
votes
0answers
12 views
How to find certificate used by PX proxy?
I have accessed Certificate Manager to view all the certificates installed on a PC, however I don't know which certificate is used by PX proxy in a corporate network. How to identify the certificate?
0
votes
1answer
49 views
Where is the documentation of Apache's mod_auth_sspi module?
I'm trying to configure the mod_auth_sspi module on my Apache server. I've found a few example configurations, but I can't find any proper documentation. Does anyone know where I can find that?
0
votes
0answers
317 views
Prevent Anonymous logons on windows-server 2016
I can't figure out how to entirely disable anonymous logon on Windows Server 2016 which is not a domain controller (regular instance). With the settings currently set I'm truly surprised to see such ...
1
vote
0answers
437 views
Getting Authentication Negotiate instead of NTLM while consuming SOAP WCF Service in Net.Core 2.1
I was trying to connect to a WCF SOAP service using NTLM Authentication Scheme, I succeeded at it when using .Net Framework 4.x but when I try to consume the same service in .NET Core 2.1 it fails (...
0
votes
0answers
215 views
Disable NTLM authentication on windows by changing the value of Lmcompatibilitylevel to 5, but still get NTLM response
I am working on the windows authentication protocol(NTLM or NTLMv2). So I disabled the NTLM response by changing the value of Lmcompatibilitylevel to 5 then I tried to access to this machine using ...
0
votes
0answers
188 views
Why is NTLM authentication appearing as NT AUTHORITY\NETWORK SERVICE instead of machine account
I have an ASP.NET application whose app pool is running as Network Service which makes a request to SSRS running on a separate server to retrieve a report. The report displays the username (using ...
1
vote
2answers
558 views
NTLM authentication module mod_auth_ntlm_winbind for Apache2 omits domain name
I have an Apache2 instance running on Ubuntu 18.04 in local intranet and I want to configure NTLM authentication on the instance. I have installed and configured mod_auth_ntlm_winbind usage for user....
2
votes
0answers
149 views
Is it possible to limit SSRS authentication to Kerberos only?
We have an instance of SSRS (SQL Server Reporting Services) which uses Kerberos Constrained Delegation to fetch data for its reports from SQL Server on behalf of its users.
For this purpose, SSRS was ...
0
votes
3answers
2k views
IIS NTLM authentication prompting for passwords on alternate DNS name
We have an existing server with HTTPS set up and an certificate signed by an internal custom CA cert.
It runs an app which uses windows authentication
e.g. https://internalserver
We browse to this ...
0
votes
2answers
1k views
Office365 NTLM authentication
Can I authenticate credentials with Office365 based on NTLMv2.
Microsoft describes on Authentication and EWS in Exchange that clients can authenticate with Exchange based on NTLM, but My program ...
2
votes
1answer
237 views
Joining workstations to the domain as a member of Protected Users group (Delegation vs User Rights)
Implementing "Protected Users" and coming across this problem that I couldn't find a solution to anywhere. Cannot join computers to the domain with delegation permissions. Instead "Add workstation to ...
-2
votes
2answers
36 views
How to identify that the protocol is using by AD DC is Kerberous?
I have created a local environment as follows:-
DC:- Windows server 2008<br>
Client:- Windows 7<br>
Domain:- januapp.local
Now I read on somewhere that, the DC uses two types of Protocol ...
2
votes
1answer
679 views
IIS and HttpListener (.NET) with windows authentication
I have a question about Windows authentication with IIS and HttpListener
I have the following setup (All installed in same Windows 8.1 box. No outside communication). All requests are sent as http://...
1
vote
0answers
94 views
Is there a way to have password-less SQL server login for another user without kerberos enabled?
I am connecting to SQL server with JDBC.
I am able to use Integrated authentication with JDBC to connect to a SQL Server 2016 instance as the current logged in user, and I did not have to supply a ...
1
vote
1answer
939 views
npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)
The operating system is MacOS, and already set up http(s) proxy inside the Network Preferences, but always failed to install any packages when running npm install (npm is one package installer for ...
1
vote
0answers
401 views
Squid as transparent proxy to tunnel all connections under Windows
There's this app Joplin that can't connect to the internet on a corporate machine which lives on Active Directory and connects to the internet through HTTP and a NTLM proxy.
The problem is that you ...
1
vote
1answer
2k views
Authenticate NTLM at reverse proxy in front of unauthenticated web servers
I have several Linux HTTP servers setup with no authentication required to access the web content. I would like for my Windows users to be able to access these sites with pass-through authentication.
...
0
votes
1answer
596 views
NTLM with squid
I am new to Squid proxy and need help in setting up NTLM authentication.
I checked so many resources on the web but did not find exact steps to get my work done
Since I have no background on proxy/...
0
votes
1answer
3k views
Auditing NTLM authentication on Domain Controllers: which GPO?
We are wanting to turn on NTLM authentication auditing to gather further details on some clients trying to authenticate using NTLM to the domain/DCs. Specifically we want to enable:
Network ...
1
vote
1answer
465 views
Does Windows prevent automatic NTLM authentication when the SMB server is located on a different subnet?
I have a Samba server[1] on my network with a share configured[2] to allow access for my Windows logon user.
I can access the share from the Windows 10 machine that hosts the SMB server VM without ...
1
vote
2answers
2k views
Looking for a lightweight NTLM HTTP proxy server
For some testing, I am looking for an NTLM HTTP proxy server. The server should authenticate the clients, not delegate that authentication to an upstream "real" NTLM proxy server (like "NTLMAPS" or "...
0
votes
1answer
3k views
Cannot RDP into Windows Server 2016: 0x80090302
I am attempting to RDP into multple Windows Server 2016 VMs with no success. It is joined to a domain and I am using a domain account.
The error I see is on the servers is Event ID 4625:
An account ...
0
votes
1answer
360 views
500 server error on after turning anon auth off and NTLM on
I'm pretty sure this is a permissions issue but can't seem to track down where at.
We have a local intranet site that is running on IIS 6.1 and running PHP. We turned on NTLM on so we can pull user-...
0
votes
1answer
806 views
NTLM Unknown username or bad password on Windows Server 2016
I've been receiving the following error(attached file) in my event log lately. So i'm trying to figure out how did this Ip(Source Netword Address) manage to authentication the login details.
I only ...
0
votes
1answer
1k views
How do you enable ntlm v3 on windows server 2008 on IIS?
My boss wants me to enable NTLM v3 on IIS on my Windows 2008 server instance.
How do I do that? Googling it is very non-conclusive.
1
vote
1answer
339 views
IIS Site Losing Ability to Authenticate With NTLM
We are having a recurring issue with one of our servers that I am not sure how to troubleshoot. The server is used to host an instance of Microsoft TFS and every few weeks Windows Authentication ...
0
votes
1answer
538 views
Windows NTLM: who is trying to check against the domain
I have a very awkward situation. I want to find the application and/or IP address attempting to break in.
We have a WEB server, running IIS 7 on a 2008R2 domain. We are (still) using NTLM.
...
1
vote
1answer
2k views
LmCompatibilityLevel to be applied to client, domain controller or both?
I'd like to apply LmCompatibilityLevel = 5 to my domain but I am not sure if this is to be applied to all clients (via GPO), domain controllers only or to both. I am a little confused as the TechNet ...
2
votes
3answers
8k views
How to stop NTLM v1 authentication from being accepted on a Windows VM environment?
My scenario is that I have a website set up via IIS in Windows Server 2012 R2 Standard using Windows Authentication which has been detected as vulnerable to an NTLMv1 attack and so I am looking to ...
0
votes
2answers
2k views
Force anonymous authentication to use NTLM v2 rather than NTLM v1?
I already started changing my applications that use NTLM v1 in the authentication for NTLM v2.
I still have several event IDs in my DCs that show sessiom NULL with anonymous accounts. after ...
1
vote
1answer
6k views
AUTH NTLM Authentication Format
I am a student worker in Enterprise Systems at the university I attend. We are in the process of converting to a new version of Exchange. We are attempting to use telnet to track messages in our test ...
0
votes
1answer
1k views
Setting up NTLM/Kerberos authentication for IIS 8, Server 2012 Workgroup
I need the following.
My Server 2012 with IIS 8 installed is in a workgroup.
Workstations are in a domain called 'hello.local'
I need for users in the domain 'hello.local', to be authenticated ...
1
vote
0answers
123 views
NTLM Authentication fails once a week for only one user
I assist with running a small AD domain with around 40 members.
For just one of those members, every wednesday at 12pm exactly, authentication will fail when they try to browse to the company intranet ...
1
vote
2answers
907 views
Why is only the first request to an NTLM authenticating proxy challenged and how do subsequent requests through the proxy get authenticated?
I am trying to develop a network tunnel that can traverse NTLM authenticating proxies. As part of that I am investigating how NTLM auth works. My test setup has WinGate proxy on one Windows box ...
0
votes
2answers
3k views
How to use nginx to proxy to a host requiring NTLM authentication?
Basically the same issue as How to use nginx to proxy to a host requiring authentication? but this time using NTLM authentication. Unfortunately the company IIS doesn't accept basic authentication.
I ...
1
vote
0answers
1k views
Setup a proxy server using Windows Authentication (NTLM)?
I want to setup a proxy server using Windows authentication (formally NTLM), I know that there are better protocols that could be use (Digest, etc.). I've been struggling to find information on how to ...
1
vote
0answers
374 views
How to set “Negotiate Seal” in NTLMSSP_AUTH?
not sure if this is right stackexchange site to ask this, but here it goes.
I have 2 servers (win 2003 and 2012) trying to do NTLM authentication with a UNIX box (with apache web server) with the ...
1
vote
1answer
2k views
Determine usage of UPN for logon inside MS AD forest / domain
maybe somebody can give me a hint on this.
I am evaluating the prerequisites for changing all (human) user's UPN in a large Microsoft AD environment to the recommended MS format (aligned with the ...
1
vote
0answers
146 views
NTLM authentication not working following server reboot
I have IIS 6.1 on Windows Server 2008 SP1. There is one web application which has only Windows Authentication enabled. This has just one provider: NTLM.
When I works, it works fine - until the server ...
1
vote
1answer
3k views
Vagrant behind NTLM proxy on windows - guest unable to connect to the host proxy
I'm on a Windows machine behind a corporate NTLM proxy and I need to vagrant up a VM from the given Vagrantfile.
I've read a few things on this topic:
http://runefs.com/2014/11/28/setting-up-vagrant-...
0
votes
1answer
467 views
Exchange 2007 RPC over HTTPS, basic auth, password prompt bypassed by clicking 'need password'.. desired behavior?
I can't handle the incessant password prompting anymore..
Our Outlook installations prompt for a password after the comps wake from sleep and/or when changing between wired/wireless. Outlook DOES ...
2
votes
0answers
564 views
haproxy anonymous frontend, authorized backend with NTLM
Need to provide an anonymous readonly access to an svn repository
AFAIK, haproxy cannot auth on backend by itself.
There's a working configuration for haproxy with basic auth. How to migrate it to ...
1
vote
1answer
825 views
Apache NTLM not authenicating domain username/password.
I have a centos box and I am trying to setup NTLM authenication for apache. I have the linux box on the AD domain already and able to get user and group info using the wbinfo command.
I have the ...
1
vote
1answer
419 views
Why is IIS asking for NTLM over and over
When running a website localy on IIS every request requires NTLM authentication over again.
When running on server it's not as bad, but still requests more than once for a batch of requests all used ...
37
votes
4answers
129k views
RDP error “The function requested is not supported” after enabling NLA
I'm trying to RDP into one of my servers, which as Network Level Authentication Enabled as well as NTLMv2 being forced. This worked fine until the server had to reboot for updates. Now, I cannot RDP ...
3
votes
1answer
2k views
NTLM on a Load Balanced Environment
We have a Netscaler VPX that load balances HTTP requests to 3 IIS services on 3 Windows servers. Authentication is set to "Windows Authentication" but because our environment isn't set up for Kerberos ...
