SMB NTLM blocking
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit 556dea7 · +6 −4 lines · also on GitHub
11
---
22
title: Block NTLM connections on SMB (preview)
33
description: Learn how to make SMB more secure by blocking NTLM.
4
−ms.topic: article
4
+ms.topic: how-to
55
author: Heidilohr
66
ms.author: helohr
77
ms.date: 01/22/2024
⋯ 9 unchanged lines
1717
1818
## Configure SMB client NTLM blocking
1919
20
−Beginning with Windows Server Preview build 25951 and Windows 11 NTLM blocking is enabled by default. To improved the security of deployments running earlier versions of Windows, you must disable NTLM manually, either by editing the relevant Group Policy or running a specific command in PowerShell.
20
+Starting with Windows Server Preview build 25951 and Windows 11, the SMB client blocks NTLM by default. To improve the security of deployments running earlier versions of Windows, you must disable NTLM manually, either by editing the relevant Group Policy or running a specific command in PowerShell.
2121
2222
To configure NTLM blocking:
2323
⋯ 43 unchanged lines
6767
Set-SmbServerConfiguration -ExceptionList "<IP Address>"
6868
```
6969
70
+---
71
+
72
+## Block NTLM while mapping SMB drives
73
+
7074
You can also block NTLM when mapping new SMB drives by running the following commands.
7175
7276
Run this command to specify NTLM blocking when mapping a drive with NET USE:
⋯ 7 unchanged lines
8084
```powershell
8185
New-SmbMapping -RemotePath \\server\share -BlockNTLM $true
8286
```
83
−
84
−---
8587
8688
## Related content
8789
⋯ 5 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 08:53 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.