In this talk, the Windows Authentication Platform team discusses the state of NTLM in Windows today, planned changes coming in Windows and Windows Server, and a sneak peek at our long-term strategy for the ultimate disablement and removal of NTLM. The talk covers why NTLM has proven to have sticking power in the past, and how new improvements to Kerberos will provide a more secure and unified Windows authentication experience going forward.

-------------------------------------------------------------------------------------------------------------------------------

The evolution of Windows authentication blog post: [ Ссылка ]

NLTM Auditing:
Restrict or Audit NTLM Auth in Domain - [ Ссылка ]
Audit use of NTLMv1 on a domain controller - [ Ссылка ]
Audit Incoming NTLM traffic - [ Ссылка ]

Kerberos Replacements:
Configuring Kerberos for IP Addresses - [ Ссылка ]
Projects/IAKERB - K5Wiki (kerberos.org) - [ Ссылка ]
draft-ietf-kitten-iakerb-03 - [ Ссылка ]

Contact Us: ntlm@microsoft.com

свернуть