Re: Eliminating NETBIOS kills NTLMv2?

From: Paul Nelson (nelson_at_thursby.com)
Date: 11/05/04


Date: Fri, 05 Nov 2004 16:10:56 -0600

in article 10onao5reu363f4@corp.supernews.com, Jacques Koorts at
jkoorts@ccalimited.com wrote on 11/5/04 10:32 AM:

> I guess that's why shutting down NetBIOS made things faster, as eliminating
> NetBIOS kills LM, NTLM, and NTLMv2.
>
> So if you disable Netbios on your computer, your computer will use Kerberos?
> What Osses support Kerberos? Is this all auto?

This is incorrect. Disabling NetBIOS does NOT kill LM, NTLM or NTLMv2.

Your PC will still use NTLMv2 to connect to a standalone server or to a
server in an untrusted domain. Your domain policy should restrict the use
of LM and NTLM for just this reason - so you DON'T allow these to be used
when connecting to an untrusted server.



Relevant Pages

  • Re: Eliminating NETBIOS kills NTLMv2?
    ... > NetBIOS kills LM, NTLM, and NTLMv2. ... > So if you disable Netbios on your computer, ... Disabling NetBIOS does NOT kill LM, NTLM or NTLMv2. ...
    (microsoft.public.win2000.group_policy)
  • Re: Eliminating NETBIOS kills NTLMv2?
    ... > NetBIOS kills LM, NTLM, and NTLMv2. ... > So if you disable Netbios on your computer, ... Disabling NetBIOS does NOT kill LM, NTLM or NTLMv2. ...
    (microsoft.public.win2000.active_directory)
  • RE: ADS Password Storage Protection
    ... In Windows it is LM or NT (sometimes called NTLM) hashes. ... NTLMv2 refers to the authenication protocol that exchanges the hash ... between the client and server authentication database. ...
    (Security-Basics)
  • Re: technetID KB321728: NO kerberos support for proxy servers
    ... microsoft is still incorperating NTLM ... NTLMv2 contains the password in a hash form. ... connections with NT4 servers, SAMBA shares on UNIX and - ... here it is- our PROXY server using NTLM won't work as ...
    (microsoft.public.isa)
  • Re: NTLM queries
    ... If there is a fallback it will be to ntlmv2, ntlm, or lm. ... ntlm [send ntlmv2 response only, ... "Windows 2000 lan manager authentication level" or download the free Windows ...
    (comp.os.ms-windows.nt.admin.security)

Loading