Prepare for NTLM disable in your domain environment

Microsoft has made an announcement stating that the NTLM authentication protocol will be disabled in Windows 11. Instead, it will be replaced by Kerberos, which is currently the default authentication protocol in Windows versions above Windows 2000.

 

https://petri.com/microsoft-disable-ntlm-windows-11/

 

To prepare for this change is coming, you can enable a GPO to audit what application is using NTLM I n your environment and also what version of NTLM still using?

 

 

https://learn.microsoft.com/en-us/troubleshoot/windows-server/windows-security/audit-domain-controller-ntlmv1

https://superuser.com/questions/1694421/how-can-i-find-out-what-is-using-ntlm-in-my-environment

https://mahim-firoj.medium.com/how-to-check-what-ntlm-version-you-are-using-in-your-domain-9eb4aed9f317

https://4sysops.com/archives/auditing-and-restricting-ntlm-authentication-using-group-policy/

 

Prepare for NTLM disable in your domain environment

How to make WebSense (Websense Web Security v7) work with Windows 7/2008

 

Question: I am using Windows 2008 Active Directory. I have DC Agent and Logon Agent set up, but Web filtering is still not working as I expected. Does version 7 support Active Directory 2008?

Answer: For Websense Web Security v7.0, DC Agent is not supported in a Windows 2008 Active Directory environment. To identify users successfully, you need to employ Logon Agent and modify NTLM Security permissions. Windows 2008 AD uses NTLM-2 (version two). Websense transparent agents were designed using NTLM (version one). DC Agent is scheduled to work with Windows 2008 Directory Service in a version of Websense Web Security expected later in 2009.

http://kb.websense.com/pf/12/webfiles/Webinars/Q&A/January_Webinar_Q&A.pdf

The workaround is modify NTLM Security permissions to NTLM v1

Windows Registry Editor Version 5.00

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\Lsa]

"LmCompatibilityLevel"=dword:00000001

How to make WebSense (Websense Web Security v7) work with Windows 7/2008