Force NTLM on Vista Home Premium

[Roger]

I have a networked disk running a samba server (NAS-347). I'm told the
reason I cant access the folders is that Vista uses NTLM-2 by default but I
cant find how to force Vista to use NTLM in the home edition. Can anyone
help?
Thanks
Roger.

 

[Michael Price]

Google is your friend

To allow NTLMv1 or LM challenge-response operations, first become a user
with Administrator rights. Next, run the program secpol.msc. Under Local
Policies then Security Options, there should be something that reads,
"Network Security: LAN Manager authentication level." By default, "Send
NTLMv2 response only" is selected. There are a few options available, but
choosing "Send LM & NTLM - use NTLMv2 session security if negotiated" seems
to make the most sense. Everything should now magically start to work if
using non-NTLMv2 aware systems.

 

[Dave R.]

I have a networked disk running a samba server (NAS-347). I'm told the
reason I cant access the folders is that Vista uses NTLM-2 by default
but I cant find how to force Vista to use NTLM in the home edition. Can
anyone help?

Change "lmcompatibilitylevel" in
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
to dword:00000001

Regards,

Dave

 

[Dave R.]

Google is your friend

To allow NTLMv1 or LM challenge-response operations, first become a
user with Administrator rights. Next, run the program secpol.msc.
Under Local Policies then Security Options, there should be something
that reads, "Network Security: LAN Manager authentication level." By
default, "Send NTLMv2 response only" is selected. There are a few
options available, but choosing "Send LM & NTLM - use NTLMv2 session
security if negotiated" seems to make the most sense. Everything
should now magically start to work if using non-NTLMv2 aware systems.

Unfortunately, since the OP is asking about a Home version, this doesn't
apply. MS did not include secpol.msc in the Home versions, you have to
edit the registry manually (which seems kinda backwards - home users are
the ones most in need of a GUI in front of the registry, business users
often have IT people to help with this stuff... Oh well)

Regards,

Dave

 

[Malke]

Unfortunately, since the OP is asking about a Home version, this doesn't
apply. MS did not include secpol.msc in the Home versions, you have to
edit the registry manually (which seems kinda backwards - home users are
the ones most in need of a GUI in front of the registry, business users
often have IT people to help with this stuff... Oh well)

I don't know whether the OP ever got his answer or not, but here is how
to do this manually - all credit and thanks to MVP Steve Winograd:

1. Run the registry editor and open this key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa

1. If it doesn't already exist, create a DWORD value named
LmCompatibilityLevel

3. Set the value to 1

4. Reboot


Malke

 

[Roger]

Change "lmcompatibilitylevel" in
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa
to dword:00000001

Regards,

Dave

Thanks all - unfortunately the machine still hangs when I try and access the
network drive - I'll have to keep searching for another solution.