Re: ntlm

From: Brian (anonymous_at_discussions.microsoft.com)
Date: 06/03/04 

Date: Thu, 3 Jun 2004 09:36:03 -0700

Thanks! Here is where I read it would break it. Where is talks about "If you do not have a mixed-mode network, you can disable NTLM authentication by swithcing to native mode at a domain controller. This tells me that downlevel clients will not be able to login although everything else I have read indicates what you have mentioned.

http://www.microsoft.com/windows2000/en/server/help/default.asp?url=/windows2000/en/server/help/sag_SEconceptsUnAuthNTLM.htm
     
     ----- ptwilliams wrote: -----
     
     Not at all. NTLM is still used for down level clients. Native mode simply
     means the DCs will no longer talk to NT4 DCs.
     
     
     Paul.
     _____________________________
     "Brian" <anonymous@discussions.microsoft.com> wrote in message
     news:F5DB5431-781F-4DB1-B95C-50AA4C89B55A@microsoft.com...
> We are thinking about switching from Windows 2000 mixed to native mode.
     We still have some downlevel clients with those being Windows NT
     workstation. I have read some things indicating that when you switch to
     native mode, it disables NTLM authentication which is needed for the
     downlevel clients. Any imput on this would be appreciated.
     
     
     

Relevant Pages

  • Re: ntlm
    ... NTLM is still used for down level clients. ... means the DCs will no longer talk to NT4 DCs. ... > We are thinking about switching from Windows 2000 mixed to native mode. ... We still have some downlevel clients with those being Windows NT ...
    (microsoft.public.win2000.active_directory)
  • Re: Native Mode and Win9x/NT Clients Authentication
    ... "Keep in mind that NTLM is not available in Native mode. ... > will authenticate using Kerberos. ... How will Windows 9x/NT clients ...
    (microsoft.public.win2000.security)
  • Native Mode and Win9x/NT Clients Authentication
    ... Windows 2000 you can then switch to Native mode. ... will authenticate using Kerberos. ... How will Windows 9x/NT clients ... Will they use the NTLM and authenticate against the PDC ...
    (microsoft.public.win2000.security)
  • RE: Kerberos Configured, but occasionally users login using NTLM
    ... The clients are set to integrated authentication. ... and then all of a sudden they will have a login that uses NTLM. ... Microsoft Online Community Support ...
    (microsoft.public.inetserver.iis.security)
  • Re: How to Eliminate NT Domain/Move Settings to Win2k
    ... I have not tried ADMT as it requires native ... The switch to native mode will affect the replication between a Win 2k DC ... domains, clients in the NT or Win 2k domain, clients in trusted domains, ... We want to transition necessary settings from the NT box ...
    (microsoft.public.windows.server.migration)