ntlm

[Guest]

We are thinking about switching from Windows 2000 mixed to native mode. We still have some downlevel clients with those being Windows NT workstation. I have read some things indicating that when you switch to native mode, it disables NTLM authentication which is needed for the downlevel clients. Any imput on this would be appreciated.

 

[ptwilliams]

Not at all. NTLM is still used for down level clients. Native mode simply
means the DCs will no longer talk to NT4 DCs.


Paul.
_____________________________

We are thinking about switching from Windows 2000 mixed to native mode.

We still have some downlevel clients with those being Windows NT
workstation. I have read some things indicating that when you switch to
native mode, it disables NTLM authentication which is needed for the
downlevel clients. Any imput on this would be appreciated.

 

[Guest]

I assume that means that if you want to, you can disable NTLM. But otherwise, it's still there and fine

At the moment, too many apps depend on NTLM and NetBT to think about this. Perhaps in Longhorn..

Paul
______________________________
----- Brian wrote: ----

Thanks! Here is where I read it would break it. Where is talks about "If you do not have a mixed-mode network, you can disable NTLM authentication by swithcing to native mode at a domain controller. This tells me that downlevel clients will not be able to login although everything else I have read indicates what you have mentioned.

http://www.microsoft.com/windows200...00/en/server/help/sag_SEconceptsUnAuthNTLM.ht

----- ptwilliams wrote: ----

Not at all. NTLM is still used for down level clients. Native mode simpl
means the DCs will no longer talk to NT4 DCs


Paul
____________________________

We are thinking about switching from Windows 2000 mixed to native mode

We still have some downlevel clients with those being Windows N
workstation. I have read some things indicating that when you switch t
native mode, it disables NTLM authentication which is needed for th
downlevel clients. Any imput on this would be appreciated

 

[Eric Chamberlain, CISSP]

I assume that means that if you want to, you can disable NTLM. But

otherwise, it's still there and fine.

At the moment, too many apps depend on NTLM and NetBT to think about this. Perhaps in Longhorn...

NTLMv2 can't be disabled, but LM and NTLMv1 should be disabled for security
reasons.


--
Eric Chamberlain, CISSP
Campus Active Directory Architect
Central Computing Services
University of California, Berkeley
http://calnetad.berkeley.edu

 

[Guest]

Thank you all for your help.