Microsoft deprecates Windows NTLM authentication protocol

Share:

Microsoft has officially deprecated NTLM authentication on Windows and Windows servers, stating that developers should transition to Kerberos or Negotiation authentication to prevent problems in the future.

New Technology LAN Manager, better known as NTLM, is an authentication protocol first released in 1993 as part of Windows NT 3.1 and as the successor to the LAN Manager (LM) protocol.

Microsoft says the NTLM protocols, which are still widely used today, are no longer under active development as of June and will be phased out in favor of more secure alternatives.

This move isn’t surprising, as Microsoft first announced its intention to kill off the aging authentication protocol in October 2023, urging admins to move to Kerberos and other contemporary authentication systems, like Negotiate.

NTLM has been extensively abused in cyberattacks known as ‘NTLM Relay’ attacks, where Windows domain controllers are taken over by forcing them to authenticate against malicious servers.

Despite Microsoft introducing new measures to defend against those attacks, like SMB security signing, attacks on NTLM authentication continue.

For example, password hashes can still be snatched and used in “pass-the-hash” attacks, obtained in phishing attacks, or extracted directly from stolen Active Directory databases or a server’s memory. The attackers can then crack the hashes to get a user’s plaintext password.

Apart from the weaker encryption used in NTLM, compared to more modern protocols like Kerberos, the protocol’s performance is subpar, requiring more network round trips, and does not support single sign-on (SSO) technologies.

All that said, NTLM is considered severely outdated by 2024 security and authentication standards, so Microsoft is deprecating it.

NTLM phase-out process

NTLM will still work in the next release of Windows Server and the next annual release of Windows. Still, users and application developers should transition to ‘Negotiate,’ which attempts to authenticate with Kerberos first and falls back to NTLM only when necessary.

Microsoft recommends that system administrators utilize auditing tools to understand how NTLM is being used within their environment and identify all instances that need to be considered in formulating a transition plan.

For most applications, replacing NTLM with Negotiate can be achieved by a one-line change in the ‘AcquireCredentialsHandle’ request to the Security Support Provider Interface (SSPI). However, there are exceptions where more extensive changes might be required.

Negotiate has a built-in fallback to NTLM to mitigate compatibility issues during the transition period.

Administrators stuck with authentication problems can check out Microsoft’s Kerberos troubleshooting guide.

Source

Leave a Comment

Your email address will not be published. Required fields are marked *

loader-image
London, GB
8:36 pm, Jan 17, 2025
weather icon 4°C
L: 3° | H: 5°
overcast clouds
Humidity: 86 %
Pressure: 1035 mb
Wind: 5 mph S
Wind Gust: 18 mph
UV Index: 0
Precipitation: 0 mm
Clouds: 100%
Rain Chance: 0%
Visibility: 10 km
Sunrise: 7:57 am
Sunset: 4:23 pm
DailyHourly
Daily ForecastHourly Forecast
Today 9:00 pm
weather icon
3° | 5°°C 0 mm 0% 3 mph 86 % 1035 mb 0 mm/h
Tomorrow 9:00 pm
weather icon
2° | 6°°C 0 mm 0% 4 mph 91 % 1035 mb 0 mm/h
Sun Jan 19 9:00 pm
weather icon
1° | 6°°C 0 mm 0% 6 mph 90 % 1023 mb 0 mm/h
Mon Jan 20 9:00 pm
weather icon
2° | 6°°C 0 mm 0% 4 mph 92 % 1020 mb 0 mm/h
Tue Jan 21 9:00 pm
weather icon
4° | 8°°C 0 mm 0% 5 mph 95 % 1019 mb 0 mm/h
Today 9:00 pm
weather icon
3° | 4°°C 0 mm 0% 3 mph 86 % 1035 mb 0 mm/h
Tomorrow 12:00 am
weather icon
2° | 4°°C 0 mm 0% 3 mph 87 % 1035 mb 0 mm/h
Tomorrow 3:00 am
weather icon
2° | 3°°C 0 mm 0% 2 mph 88 % 1033 mb 0 mm/h
Tomorrow 6:00 am
weather icon
2° | 2°°C 0 mm 0% 1 mph 91 % 1031 mb 0 mm/h
Tomorrow 9:00 am
weather icon
2° | 2°°C 0 mm 0% 2 mph 87 % 1031 mb 0 mm/h
Tomorrow 12:00 pm
weather icon
6° | 6°°C 0 mm 0% 3 mph 67 % 1030 mb 0 mm/h
Tomorrow 3:00 pm
weather icon
6° | 6°°C 0 mm 0% 3 mph 61 % 1027 mb 0 mm/h
Tomorrow 6:00 pm
weather icon
4° | 4°°C 0 mm 0% 4 mph 81 % 1026 mb 0 mm/h
Name Price24H (%)
Bitcoin(BTC)
€102,234.26
4.66%
Ethereum(ETH)
€3,388.35
4.60%
XRP(XRP)
€3.18
-1.16%
Tether(USDT)
€0.97
0.07%
Solana(SOL)
€212.52
2.45%
Dogecoin(DOGE)
€0.404507
8.49%
USDC(USDC)
€0.97
-0.01%
Shiba Inu(SHIB)
€0.000023
8.94%
Pepe(PEPE)
€0.000019
10.43%
Peanut the Squirrel(PNUT)
€0.64
6.86%
Scroll to Top