Microsoft shows venerable and vulnerable NTLM security protocol the door

June 6, 2024 at 08:07AM Microsoft has officially deprecated the NTLM authentication protocol, signaling the need for admins to transition to more secure alternatives. While NTLM will continue to work in future Windows releases, calls to NTLM should be replaced by Negotiate, prioritizing Kerberos authentication. The move is part of Microsoft’s goal to eliminate the … Read more

Microsoft deprecates Windows NTLM authentication protocol

June 4, 2024 at 11:51AM Microsoft has deprecated NTLM authentication on Windows and Windows servers, encouraging transition to Kerberos or Negotiation authentication for better security. NTLM, an aging protocol still widely used, faces abuse in cyberattacks. Microsoft suggests system administrators audit NTLM usage and transition to Negotiate, with a built-in fallback to NTLM. Detailed transition … Read more

Microsoft announces deprecation of Windows NTLM authentication

June 4, 2024 at 11:44AM Microsoft has deprecated NTLM authentication on Windows and Windows servers, urging a transition to Kerberos or Negotiation authentication. This is due to security concerns, including cyberattacks like ‘NTLM Relay.’ Users and developers are recommended to utilize auditing tools to facilitate the transition. The replacement can generally be achieved with a … Read more

Windows 11 to Deprecate NTLM, Add AI-Powered App Controls and Security Defenses

May 21, 2024 at 06:09AM Microsoft is implementing new security measures for Windows 11, including deprecating NT LAN Manager (NTLM) in favor of Kerberos for authentication. Other changes involve enhancing user authentication, securing Windows Hello with virtualization-based security, and implementing Smart App Control with AI capabilities. These measures aim to strengthen overall security and counter … Read more

Microsoft to Phase Out NTLM in Favor of Kerberos for Stronger Authentication

October 14, 2023 at 02:48AM Microsoft plans to eliminate NT LAN Manager (NTLM) in Windows 11, focusing instead on strengthening the Kerberos authentication protocol. New features in Windows 11 include Initial and Pass Through Authentication Using Kerberos (IAKerb) and a local Key Distribution Center (KDC) for Kerberos. NTLM has vulnerabilities that make it susceptible to … Read more

Microsoft plans to kill off NTLM authentication in Windows 11

October 13, 2023 at 12:50PM Microsoft has announced that the NTLM authentication protocol will be phased out in Windows 11. Kerberos has replaced NTLM as the default authentication protocol since Windows 2000. Despite being used in older versions, NTLM is still vulnerable to attacks such as relay attacks and pass-the-hash attacks. Microsoft is working on … Read more