Microsoft has taken significant steps to enhance the security of its operating systems by improving defense mechanisms against NTLM relay attacks. A less publicized aspect of this effort is the removal of support for the outdated NTLMv1 protocol in the Windows 11 24H2 update and Windows Server 2025.
In response to inquiries from heise online, Microsoft has confirmed the discontinuation of NTLMv1, indicating that this change applies not only to the Windows desktop client but also to the server edition. Documentation has been updated to reflect this change, including the addition of a note concerning Windows Server 2025.
According to Microsoft, users are encouraged to transition from NTLMv1 to the more secure Negotiate protocol, which prioritizes Kerberos authentication while reverting to NTLM only if necessary. Further details on this evolution of Windows authentication are available from Microsoft’s resources.
This update aligns with broader security measures announced by Microsoft, aimed at mitigating the risks associated with NTLM relay attacks, where malicious actors exploit intercepted credentials. Notably, Windows Server 2025 includes features like Extended Protection for Authentication (EPA) and LDAP Channel Binding, which help prevent unauthorized access by ensuring clients can only authenticate with designated servers.
For further details, you can reference the official Microsoft updates on removed features in Windows and the discussion surrounding the enhanced security protocols.
Hudson Valley Host is premier provider of cutting-edge hosting solutions, specializing in delivering a seamless online experience for businesses and individuals. We offer a comprehensive range of hosting services, including Shared Hosting, VPS, Dedicated Servers, and Colocation. With 24/7 technical support, robust security measures, and user-friendly control panels, we empower clients in managing their online presence effortlessly. Hudson Valley Host is your trusted partner in achieving online success.
For Inquiries or to receive a personalized quote, please reach out to us through our contact form here or email us at sales@hudsonvalleyhost.com.
