Jun 4, 2024 04:42 EDT
with 0 comments
Back in October last year, Microsoft expressed its desire to eventually disable NTLM authentication. The company on its official website has updated the list of deprecated Windows features where it has now added NTLM or New Technology Lan Manager. These will include all versions of NTLM including LANMAN, NT audit, NTLMv1 and NTLMv2.
However, alongside that, the tech giant has also added that it would continue to work on the “next release of Windows Server and the next annual release of Windows” which means NTLM authentication will function on the 2024 update for Windows 11, version 24H2, and on Windows Server 2025. Microsoft is currently ensuring system requirements compatibility for the two operating systems.
The company writes:
All versions of NTLM, including LANMAN, NTLMv1, and NTLMv2, are no longer under active feature development and are deprecated. Use of NTLM will continue to work in the next release of Windows Server and the next annual release of Windows.
Calls to NTLM should be replaced by calls to Negotiate, which will try to authenticate with Kerberos and only fall back to NTM when Necessary.
Earlier, Microsoft had stated that their aim for encouraging the shift was to boost security measures in authentication processes, citing that newer protocols like Kerberos offer improved security functionalities. The company now advises on utilizing the Negotiate protocol, which will revert to NTLM only if Kerberos is unavailable.
Microsoft explains:
In most situations, applications can switch from NTLM to Negotiate with just a simple modification in their AcquireCredentialsHandle request to SSPI. However, there are exceptions, particularly for applications that depend heavily on predetermined assumptions about the number of exchanges required to finalize authentication. Generally, Negotiate necessitates at least one more interaction. Certain conditions might need more detailed setups.
For those curious about the age of NTLM, it has been in use since 1993, having been introduced with Windows NT 3.1. On the other hand, Kerberos, considered more “modern,” has been part of the Windows ecosystem since the release of Windows 2000 Service Pack 4 (SP4).
·
May 23, 2024
with
·
May 4, 2024
with
·
Apr 14, 2024
with
·
Sep 22, 2022
with
Hudson Valley Host is premier provider of cutting-edge hosting solutions, specializing in delivering a seamless online experience for businesses and individuals. We offer a comprehensive range of hosting services, including Shared Hosting, VPS, Dedicated Servers, and Colocation. With 24/7 technical support, robust security measures, and user-friendly control panels, we empower clients in managing their online presence effortlessly. Hudson Valley Host is your trusted partner in achieving online success.
For Inquiries or to receive a personalized quote, please reach out to us through our contact form here or email us at sales@hudsonvalleyhost.com.
