Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit 063fe7e · +6 −7 lines · also on GitHub
11
---
22
title: NTLM Overview
3
−description: Learn about NTLM, any changes in functionality, and find links to technical resources to Windows Authentication and NTLM for Windows Server 2012 and previous versions.
3
+description: Learn about NTLM, any changes in functionality, and find links to technical resources to Windows Authentication and NTLM for Windows Server.
44
ms.topic: article
55
ms.assetid: 773909fd-c0bc-498a-95fc-bb452ec04d90
66
ms.author: jgerend
77
author: JasonGerend
88
manager: mtillman
9
−ms.date: 10/12/2016
9
+ms.date: 09/21/2023
1010
---
1111
# NTLM Overview
1212
1313
>Applies to: Windows Server 2022, Windows Server 2019, Windows Server 2016
1414
15
−This topic for the IT professional describes NTLM, any changes in functionality, and provides links to technical resources to Windows Authentication and NTLM for Windows Server 2012 and previous versions.
15
+This topic for the IT professional describes NTLM, any changes in functionality, and provides links to technical resources to Windows Authentication and NTLM for Windows Server.
1616
1717
## <a name="BKMK_OVER"></a>Feature description
1818
NTLM authentication is a family of authentication protocols that are encompassed in the Windows Msv1\_0.dll. The NTLM authentication protocols include LAN Manager version 1 and 2, and NTLM version 1 and 2. The NTLM authentication protocols authenticate users and computers based on a challenge\/response mechanism that proves to a server or domain controller that a user knows the password associated with an account. When the NTLM protocol is used, a resource server must take one of the following actions to verify the identity of a computer or user whenever a new access token is needed:
⋯ 8 unchanged lines
2727
Reducing the usage of the NTLM protocol in an IT environment requires both the knowledge of deployed application requirements on NTLM and the strategies and steps necessary to configure computing environments to use other protocols. New tools and settings have been added to help you discover how NTLM is used in order to selectively restrict NTLM traffic. For information about how to analyze and restrict NTLM usage in your environments, see [Introducing the Restriction of NTLM Authentication](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd560653(v=ws.10)) to access the Auditing and restricting NTLM usage guide.
2828
2929
## <a name="BKMK_NEW"></a>New and changed functionality
30
−There are no changes in functionality for NTLM for Windows Server 2012 .
30
+There are no changes in functionality for NTLM for Windows Server.
3131
3232
## <a name="BKMK_DEP"></a>Removed or deprecated functionality
33
−There is no removed or deprecated functionality for NTLM for Windows Server 2012 .
33
+There is no removed or deprecated functionality for NTLM for Windows Server.
3434
3535
## <a name="BKMK_INSTALL"></a>Server Manager information
3636
NTLM cannot be configured from Server Manager. You can use Security Policy settings or Group Policies to manage NTLM authentication usage between computer systems. In a domain, Kerberos is the default authentication protocol.
⋯ 7 unchanged lines
4444
|**Planning**|[IT Infrastructure Threat Modeling Guide](/previous-versions/tn-archive/dd941826(v=technet.10))<p>[Threats and Countermeasures: Security Settings in Windows Server 2003 and Windows XP](/previous-versions/tn-archive/dd162275(v=technet.10))<p>[Threats and Countermeasures Guide: Security Settings in Windows Server 2008 and Windows Vista](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/dd349791(v=ws.10))<p>[Threats and Countermeasures Guide: Security Settings in Windows Server 2008 R2 and Windows 7](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/hh125921(v=ws.10))|
4545
|**Deployment**|[Extended Protection for Authentication](/dotnet/framework/wcf/feature-details/extended-protection-for-authentication-overview)<p>[Auditing and restricting NTLM usage guide](/previous-versions/windows/it-pro/windows-server-2008-R2-and-2008/jj865674(v=ws.10))<p>[Ask the Directory Services Team : NTLM Blocking and You: Application Analysis and Auditing Methodologies in Windows 7](https://blogs.technet.com/askds/archive/2009/10/08/ntlm-blocking-and-you-application-analysis-and-auditing-methodologies-in-windows-7.aspx)<p>[Windows Authentication Blog](https://blogs.technet.com/authentication/)<p>[Configuring MaxConcurrentAPI for NTLM pass-through authentication](https://support.microsoft.com/help/2688798/how-to-do-performance-tuning-for-ntlm-authentication-by-using-the-maxc)|
4646
|**Development**|[Microsoft NTLM \(Windows\)](/windows/win32/secauthn/microsoft-ntlm)<p>[\[MS\-NLMP\]: NT LAN Manager \(NTLM\) Authentication Protocol Specification](/openspecs/windows_protocols/ms-nlmp/b38c36ed-2804-4868-a9ff-8dd3182128e4)<p>[\[MS\-NNTP\]: NT LAN Manager \(NTLM\) Authentication: Network News Transfer Protocol \(NNTP\) Extension](/openspecs/windows_protocols/ms-nntp/73ae7d96-30fe-4750-807c-bfe7c38b3a0a)<p>[\[MS\-NTHT\]: NTLM Over HTTP Protocol Specification](/openspecs/windows_protocols/ms-ntht/f09cf6e1-529e-403b-a8a5-7368ee096a6a)|
47
−|**Troubleshooting**|Not yet available|
48
−|**Community resources**|[Is this horse dead yet: NTLM Bottlenecks and the RPC runtime](https://blogs.technet.com/b/askds/archive/2011/09/15/is-this-horse-dead-yet-ntlm-bottlenecks-and-the-rpc-runtime.aspx)|
47
+|**Updates**|[New NTLM pass-through authentication protections for CVE-2022-21857](https://learn.microsoft.com/troubleshoot/windows-server/windows-security/windows-updates-add-new-ntlm-pass-through-authentication-protections)|
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 08:07 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.