55
votes
RDP error "The function requested is not supported" after enabling NLA
I had the same issue. I found the issue has to do with a Windows Update patch that was pushed out to my work station in last nights Windows Updates. There was a critical CVE (CVE-2018-0886) for RDP ...
- 661
7
votes
Hardening a file-serving Windows Server 2019 instance
First of all, reinstall the server, because :
This one might be compromised and can't be trusted anymore.
Windows is secure by default, and maybe someone lowered the security settings of your server, ...
- 6,965
5
votes
How can I check if my IIS site is using NTLM or Kerberos?
If you have access to your IIS server then the answer is much simpler than inspecting HTTP traffic: Simply view the site Authentication module config for Windows Authentication.
In IIS Manager
...
- 2,654
5
votes
Office365 NTLM authentication
No, you cannot. O365 uses modern claims based auth, so WS* and SAML. Possibly OAUTH or OPENID too.
If you have on-prem AD, ADFS, you can probably auth to that, and get a token to pass to O365.
- 195
3
votes
Is there any working Apache module to implement NTLM on Ubuntu Server
Since 2010, Microsoft no longer recommends NTLM in applications.
NTLM does not support any recent cryptographic methods, such as AES or SHA-256. It uses cyclic redundancy check (CRC) or message ...
- 51k
2
votes
Accepted
Authenticate NTLM at reverse proxy in front of unauthenticated web servers
I ended up with 2 viable solutions to this problem. Hopefully this will be helpful to anyone trying to setup something similar.
Set up IIS with ARR (Application Request Routing) and enable Windows ...
- 101
2
votes
Accepted
Looking for a lightweight NTLM HTTP proxy server
Just stumbling upon your question. We too had to test against a NTLMv2 capable http proxy (from Java).
In the end, we used a product called WinGate, which is free up to some users. We just installed ...
- 136
2
votes
Accepted
How do you enable ntlm v3 on windows server 2008 on IIS?
I do NTLM stuff all day and I can assure you,there is is no such thing as NTLMv3. Depending on your boss, you can mock her/him, or ask for more details and see what happens. Ask why. :-P
Maybe he/...
- 195
2
votes
RDP error "The function requested is not supported" after enabling NLA
I had the same issue with a remote VM, with only RDP access. This worked for me...
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\CredSSP\Parameters]
"...
- 21
2
votes
RDP error "The function requested is not supported" after enabling NLA
See
Windows RDP: ‘An authentication error has occurred’
This is happening after you have a applied a windows security update it was this security update. It also tells you how to change your GPOs ...
- 21
2
votes
IIS and HttpListener (.NET) with windows authentication
I have an explanation for this, you are attempting to achieve Single Sign On (SSO) using the negotiate / integrated windows authentication mechanism. This will not work with the Local Security ...
- 61
2
votes
NTLM authentication module mod_auth_ntlm_winbind for Apache2 omits domain name
Ok, I've found a solution. The deal is configuration of mod_auth_ntlm_winbind's underlying mechanism, winbind. It is a part of Samba and uses it's config file. In my cases there was option "winbind ...
- 31
2
votes
Accepted
Basic Auth to NTLM conversion proxy
There is no purely Apache-based solution in existence. Your options (I know of and tried myself) are:
Caddy — free, albeit need to custom build, which is possible using their web interface, a service ...
- 14.2k
1
vote
Clear cached authentication for network share
The credentials are probably stored in the Credentials Manager, delete the old credentials and Windows will ask the password again (or edit the credential and provide the new password in the ...
- 6,965
1
vote
Accepted
SMB Connection to non-domain server
https://docs.microsoft.com/en-us/troubleshoot/windows-client/networking/cannot-logon-access-administrative-share
To allow administrative share access in a workgroup for Windows, use the following ...
- 72k
1
vote
Accepted
Problems accessing shared folder in Windows clustered file Server 2008 R2
OP reports: "The problem has been solved. I asked the firm to configure a NAT on hardware vpn gateway to give my servers acces to a cloud service. Now servers are part of System911 domain. ...
- 26
1
vote
IIS NTLM authentication prompting for passwords on alternate DNS name
Sending creds to a web server is risky. Each browser has a policy setting or file that determines if the browser sends creds without prompt. Chrome and FF here. https://specopssoft.com/blog/...
- 195
1
vote
Office365 NTLM authentication
According the article you provided, it seems NTLM authentication is only available for Exchange on-premises servers.
- 339
1
vote
Default for lmcompatibilitylevel if it doesn't exist
A response from a Microsoft employee to a similar question on Windows Server 2008 on MSDN:
The default level value for LmCompatibilityLevel for each version of Windows is as follows:
Windows XP: ...
- 11
1
vote
Accepted
NTLM authentication and non-domain joined computers accessing shares on a domain
Yes, that is the case, though there are reasonable steps you can take to make NTLM authentication ...less risky. (But not risk free.)
Use long passwords
NTLM passwords are still digested using a ...
- 164
1
vote
Where is the documentation of Apache's mod_auth_sspi module?
I still haven't found any official documentation, but I did find this helpful write-up:
https://beradrian.wordpress.com/tag/authentication/
Here's a copypaste in case the site 404s:
Now lets’ ...
- 277
1
vote
Accepted
npm install behind one proxy but got Http Error=407 (Forefront TMG requires authorization)
Finally find out the solution:
don't use plain text password ( add one # at the beginning of the Password line, like change Password XXX to #Password XXX)
use PassLM, PassNT, PassNTLMv2 instead (it ...
- 161
1
vote
Change Mozilla settings globally on internal network
MozillaGPO project provides mozilla autoconfig.js module that allow managing mozilla software wia Group Policy.
- 3,313
1
vote
What does AuthForwardServerList do?
I recently came across this and wanted to provide an answer, even though the question is dated. My answer comes from TechNet KB 943280.
After the AuthForwardServerList registry key is created, the ...
- 3,499
1
vote
How can I check if my IIS site is using NTLM or Kerberos?
Found out that microsoft has a really good
page about Kerberos.
Here are a lot of pitfalls description when you use Kerberos and Negotiation (for example on localhost the Negotiation use NTLM as ...
- 136
1
vote
Accepted
LmCompatibilityLevel to be applied to client, domain controller or both?
Typically the same value is configured on all Windows computers. The objective is to prevent any and all usages of NTLM1 due to the severity of the security risk. If a client transmits an NTLM1 hash ...
- 37.7k
1
vote
How to stop NTLM v1 authentication from being accepted on a Windows VM environment?
From my experience, I've faced this because of setting ntlm.auth.domain with incorrect domain name, when configuring NTLMv2 (Configured an authentication in 2008 R2).
Found the solution in @Silvio ...
- 5,135
1
vote
Force anonymous authentication to use NTLM v2 rather than NTLM v1?
I think if you look at this answered question, that you will see how to disable NTLMv1 connections and that should force the connection to be over NTLMv2
- 640
1
vote
AUTH NTLM Authentication Format
What would the format be? Something like "domain/user password"?
Not so simple: NTLM does not transmit passwords in an unencrypted form. Here is an example SMTP session with NTLM authentication.
...
- 3,313
1
vote
Why is only the first request to an NTLM authenticating proxy challenged and how do subsequent requests through the proxy get authenticated?
Just for more information on this. There's quite a lot of work that has to be done relating to any NTLM handshake / auth. For starters, the request is typically sent 3 times in order to complete the ...
- 267
Only top scored, non community-wiki answers of a minimum length are eligible