SMB NTLM blocking
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit 3bf76a6 · +2 −2 lines · also on GitHub
⋯ 18 unchanged lines
1919
NTLM blocking for the SMB client requires the following prerequisites:
2020
2121
- An SMB client running on one of the following operating systems.
22
− - [Windows Server Insiders build 25951](https://techcommunity.microsoft.com/t5/windows-server-insiders/announcing-windows-server-preview-build-25951/m-p/3926636) or later.
22
+ - Windows Server 2025 or later.
2323
- [Windows 11 Insiders build 25951](https://blogs.windows.com/windows-insider/2023/09/13/announcing-windows-11-insider-preview-build-25951-canary-channel/) or later.
2424
- An SMB server that allows using Kerberos.
2525
⋯ 2 unchanged lines
2828
2929
## Configure SMB client NTLM blocking
3030
31
−Starting with Windows Server 2025 (Preview) and Windows 11 Insiders build 25951, you have the option to configure SMB to block NTLM. To improve the security of deployments running earlier versions of Windows, you must disable NTLM manually, either by editing the relevant Group Policy or running a specific command in PowerShell.
31
+Starting with Windows Server 2025 and Windows 11 Insiders build 25951, you have the option to configure SMB to block NTLM. To improve the security of deployments running earlier versions of Windows, you must disable NTLM manually, either by editing the relevant Group Policy or running a specific command in PowerShell.
3232
3333
To configure NTLM blocking:
3434
⋯ 88 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 08:53 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.