Microsoft Begins Disabling NTLM Authentication in Windows

Various versions of Windows have used Kerberos as their primary authentication protocol for over 20 years. However, in certain cases, the operating system must use another method, such as NTLM (NT LAN Manager).

NTLM is an older authentication protocol from Microsoft and was replaced by Kerberos in Windows 2000. However, NTLM is still used to store Windows passwords locally or in the NTDS.dit file in Active Directory domain controllers. NTLM is now considered insecure and contains many serious security vulnerabilities.

Back in October last year, Microsoft officially announced that the company was planning to expand its use of Kerberos, with the ultimate goal of completely eliminating the use of NTLM on Windows, specifically starting on Windows 11 and beyond.

The company has posted on its official website an updated list of deprecated Windows features, which now includes NTLM (New Technology Lan Manager). The announcement covers all versions of NTLM including LANMAN, NTLMv1, and NTLMv2.

By June this year, Microsoft confirmed that it plans to discontinue NTLM support after Windows 11 24H2 and Windows Server 2025 and thus the feature will no longer be available in future versions of Windows client and server.

Microsoft Begins Disabling NTLM Authentication in Windows

Today, Microsoft began removing NTLM on Windows 11 24H2 and Windows Server 2025, announcing that NTLMv1 has been removed from the aforementioned Windows versions.

Microsoft previously explained that the reason behind this move was to improve the security of authentication, as more modern protocols like Kerberos would provide better protection. The company now recommends using the Negotiate protocol to ensure that NTLM is only used when Kerberos is not available.

Microsoft has updated the notice on its end of support feature page to read as follows:

All versions of NTLM, including LANMAN, NTLMv1, and NTLMv2, are no longer in active feature development and have been deprecated. Use of NTLM will continue to be maintained in the next release of Windows Server and the next annual release of Windows. Calls to NTLM should be replaced with calls to Negotiate, which will attempt to authenticate using Kerberos and only fallback to NTLM when necessary.

[Update - November 2024]: NTLMv1 has been removed starting with Windows 11 version 24H2 and Windows Server 20205.

NTLM is commonly used by businesses and organizations for Windows authentication, as it "does not require a local network connection to a Domain Controller". It is also "the only protocol supported when using a local account" and "works even if you don't know what the target server is".

These benefits have led to some applications and services hardcoding NTLM instead of switching to more modern authentication protocols such as Kerberos. Kerberos provides a better level of security and is more scalable than NTLM. That is why Kerberos is now the preferred default protocol in Windows environments.

The problem is that while businesses can disable NTLM for authentication, those hard-wired applications and services can still have problems. This is why Microsoft has added a number of new authentication features to Kerberos. These changes are being rolled out so that Kerberos will eventually become the sole Windows authentication protocol.

In addition to NTLMv1, another security feature has also been removed on Windows 11 24H2. Microsoft has confirmed that Windows Information Protection (WIP) or enterprise data protection (EDP) is being removed from the Windows environment. This feature was intended to protect against accidental data leaks.

Leave a Comment

Microsoft: PCs running Windows 11 21H2/22H2 will be forced to update to 23H2 next month

Microsoft: PCs running Windows 11 21H2/22H2 will be forced to update to 23H2 next month

Windows 11 version 21H2 is one of the major original releases of Windows 11 that began rolling out globally on October 4, 2021.

Microsoft spams Copilot QR codes on Windows 11 lock screen to lure users

Microsoft spams Copilot QR codes on Windows 11 lock screen to lure users

The year 2023 saw Microsoft betting heavily on artificial intelligence and its partnership with OpenAI to make Copilot a reality.

Microsoft details Bluetooth LE Audio requirements and support for Windows 11, 10

Microsoft details Bluetooth LE Audio requirements and support for Windows 11, 10

Microsoft introduced Bluetooth LE (low energy) Audio support with Windows 11 22H2 KB5026446 (build 22621.1778), also known as Moment 3, in May 2023.

Microsoft Launches New Sticky Notes App for Windows 11

Microsoft Launches New Sticky Notes App for Windows 11

After keeping things the same for years, the Sticky Note update in mid-2024 changed the game.

Microsoft announces list of CPUs supported by Windows Server 2025, allowing multiple virtual machines to share a single CPU

Microsoft announces list of CPUs supported by Windows Server 2025, allowing multiple virtual machines to share a single CPU

Today, Microsoft officially announced the general availability of Windows Server 2025 along with System Center 2025.

What a Classic 90s-Style Windows 11 Interface Would Look Like

What a Classic 90s-Style Windows 11 Interface Would Look Like

There's always something incredibly cool about the nostalgic user interface of 90s versions of Windows.

Microsoft: TPM 2.0 in Windows 11 is mandatory and non-negotiable

Microsoft: TPM 2.0 in Windows 11 is mandatory and non-negotiable

More than three years ago, when Microsoft announced Windows 11, the operating system immediately caused a lot of controversy.

Windows 11 Market Share Is Quickly Catching Up to Windows 10

Windows 11 Market Share Is Quickly Catching Up to Windows 10

The October 2024 report provides an overview of Windows 11's market share compared to other versions of Windows.

Microsofts foldable smartphone wont have a crease

Microsofts foldable smartphone wont have a crease

Microsoft is said to be getting closer to launching its first foldable smartphone when it was granted a patent for a foldable phone with the ability to fold 360 degrees but without creating wrinkles on the screen on October 1.

Microsoft is about to stop deploying WSUS driver synchronization, users take note!

Microsoft is about to stop deploying WSUS driver synchronization, users take note!

In a new post on its Tech Community website, Microsoft has announced plans to discontinue WSUS driver synchronization in favor of its latest cloud-based driver services.

How to Set Windows Photo Viewer as Default Photo Viewer on Windows 11

How to Set Windows Photo Viewer as Default Photo Viewer on Windows 11

Windows Photo Viewer was first released alongside Windows XP and has quickly become one of the most frequently used tools on Windows.

Windows 11 is about to add a system configuration advice section

Windows 11 is about to add a system configuration advice section

The latest previews of Windows 11 that Microsoft released this week include an improved About section in the Settings app, where users can get more information about the hardware inside their computer.

Windows 11 now lets users easily type with an Xbox controller

Windows 11 now lets users easily type with an Xbox controller

To address common issues faced by PC gamers, Microsoft has finally made the Windows operating system easier to navigate with an Xbox controller.

Windows 11 updates silently create a mysterious folder on the C drive

Windows 11 updates silently create a mysterious folder on the C drive

The April security updates for Windows 11 silently created a new empty folder on the C drive.

Microsoft will continue to invest heavily in OpenAI at a valuation of more than $100 billion

Microsoft will continue to invest heavily in OpenAI at a valuation of more than $100 billion

Microsoft has invested billions of dollars in OpenAI since 2019, although the Redmond-based software giant is by no means the primary investor in the innovative AI startup.

Solving Windows 11 Something Went Wrong During Upgrade

Solving Windows 11 Something Went Wrong During Upgrade

Struggling with the frustrating "Something Went Wrong" error during Windows 11 upgrade? Discover proven, step-by-step fixes to get your system updated smoothly and securely. Say goodbye to upgrade headaches!

Troubleshooting Windows 11 Printer Error 709 After Update

Troubleshooting Windows 11 Printer Error 709 After Update

Struggling with Printer Error 709 on Windows 11 after a recent update? Discover proven troubleshooting steps to resolve this issue and get your printing back on track without frustration. Step-by-step guide for smooth fixes.

How to Use Windows 11 Accessibility Features 2026

How to Use Windows 11 Accessibility Features 2026

Discover how to harness the latest Windows 11 accessibility features in 2026 to make your computing experience inclusive, efficient, and empowering. Step-by-step guides for everyone.

Troubleshooting Java Development Kit (JDK) Install Failures

Troubleshooting Java Development Kit (JDK) Install Failures

Struggling with JDK install failures? Dive into this comprehensive troubleshooting guide to resolve common Java Development Kit issues on Windows, macOS, and Linux. Get back to coding without the hassle.

Troubleshooting Windows 11 Sticky Notes Database Error

Troubleshooting Windows 11 Sticky Notes Database Error

Struggling with the Windows 11 Sticky Notes database error? Discover proven troubleshooting steps to restore your notes quickly and effortlessly. Get back to productivity without the frustration.

How to Fix Windows 11 Rainmeter Skin Positioning Error

How to Fix Windows 11 Rainmeter Skin Positioning Error

Struggling with Rainmeter skin positioning errors on Windows 11? Discover proven fixes for misalignment, dragging issues, and DPI glitches. Step-by-step guide to restore your desktop perfection.

How to Use Windows 11 Virtual Desktops Correctly

How to Use Windows 11 Virtual Desktops Correctly

Discover how to use Windows 11 virtual desktops correctly to supercharge your workflow. Learn setup, management, and pro tips for seamless multitasking without the overwhelm.

Converting MBR to GPT Without Data Loss in Windows 11

Converting MBR to GPT Without Data Loss in Windows 11

Discover how to safely convert MBR to GPT without data loss in Windows 11. Follow our step-by-step guide using built-in tools and third-party software for a seamless upgrade to modern partitioning.

How to Fix 0x80072ee7 Store Connectivity Error

How to Fix 0x80072ee7 Store Connectivity Error

Struggling with the 0x80072ee7 Store connectivity error? Discover proven, step-by-step fixes to restore your Microsoft Store access quickly and easily. Say goodbye to frustrations!

How to Fix Background Change Error on Windows 11 Pro

How to Fix Background Change Error on Windows 11 Pro

Struggling with background change errors on Windows 11 Pro? This step-by-step guide helps gamers fix the issue fast, restoring your custom setups without hassle. Discover proven methods to personalize your desktop effortlessly.

How to Setup Windows 11 Dynamic Refresh Rate

How to Setup Windows 11 Dynamic Refresh Rate

Discover how to set up Windows 11 Dynamic Refresh Rate for buttery-smooth performance on compatible displays. Follow our step-by-step guide to optimize your PC

How to Fix Windows 11 Memory Leaks in Browsers

How to Fix Windows 11 Memory Leaks in Browsers

Struggling with slow browsers on Windows 11? Discover proven fixes for memory leaks in Chrome, Edge, Firefox, and more. Boost performance and end frustration today.

Solving Windows 11 Photos App File System Error

Solving Windows 11 Photos App File System Error

Struggling with the Windows 11 Photos App File System Error? Discover proven, step-by-step fixes to restore your photo viewing experience without hassle. Updated with the latest troubleshooting tips for seamless performance.

Troubleshooting Windows 11 OBS Studio Black Screen Fix

Troubleshooting Windows 11 OBS Studio Black Screen Fix

Struggling with OBS Studio black screen on Windows 11? Discover proven fixes for smooth streaming and recording. Step-by-step guide to resolve black screen issues quickly and easily.

Solving GPT Partition Style Not Supported on Old PCs

Solving GPT Partition Style Not Supported on Old PCs

Struggling with "GPT Partition Style Not Supported" error on your old PC? Discover proven solutions to convert partitions safely, upgrade your system, and get back to smooth computing without data loss. Perfect for legacy hardware users.