Share via

Allow connection fallback to NTLM

Tathagata Bhattacharya 125 Reputation points
2024-05-16T12:12:08.5166667+00:00

Hi,

Presently in our environment "Allow connection fallback to NTLM is enabled" and we are getting a notification stating it can be a security risk.

Can you please recommend if we should leave it enabled or we should disable it.NTLM.jpg

Thank you.

Microsoft Security | Intune | Configuration Manager | Deployment
Microsoft Security | Intune | Configuration Manager | Other
0 comments
Accepted answer
  1. Marcin Policht 50,895 Reputation points MVP Volunteer Moderator
    2024-05-16T12:29:53.6433333+00:00

    If you disable it, you are risking your workloads that do not support Kerberos to break.

    Rather than disabling it, you should track the usage of NTLM in your environment and address it proactively

    Details at https://4sysops.com/archives/auditing-and-restricting-ntlm-authentication-using-group-policy/

    If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.

    hth

    Marcin

1 additional answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Mike Berry 1 Reputation point
    2024-06-10T12:57:37.0666667+00:00

    Im getting the same notification but definitely dont have this enabled. I have 4 primary sites where this has been disabled for a loooong time, and yet this notification is appearing at console-launch. Anybody seen that before?

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.