The Evolution of Windows Authentication

In this talk, the Windows Authentication Platform team discusses the state of NTLM in Windows today, planned changes coming in Windows and Windows Server, and a sneak peek at our long-term strategy for the ultimate disablement and removal of NTLM. The talk covers why NTLM has proven to have sticking power in the past, and how new improvements to Kerberos will provide a more secure and unified Windows authentication experience going forward.

-------------------------------------------------------------------------------------------------------------------------------

The evolution of Windows authentication blog post: https://techcommunity.microsoft.com/t...

NLTM Auditing:
Restrict or Audit NTLM Auth in Domain - https://learn.microsoft.com/windows/s...
Audit use of NTLMv1 on a domain controller - https://learn.microsoft.com/troublesh...
Audit Incoming NTLM traffic - https://learn.microsoft.com/windows/s...

Kerberos Replacements:
Configuring Kerberos for IP Addresses - https://learn.microsoft.com/windows-s...
Projects/IAKERB - K5Wiki (kerberos.org) - https://k5wiki.kerberos.org/wiki/Proj...
draft-ietf-kitten-iakerb-03 - https://datatracker.ietf.org/doc/html...

Contact Us: ntlm@microsoft.com