Forum Discussion
NTLMv1 authentication
I know this is long overdue, but in pursuit.
I have identified our Radius servers (Windows Server 2019 NPS) as the main source of NTLMv1 authentications taking place. I want to disable NTLMv1 and LM, and enforce at least NTLMv2 within our Windows Environment.
The radius servers are used to provide network access, wired and wireless. How can we make sure that NTLMv1 is no longer used?
1 Reply
Please refer to this article, you can enable NTLMv2 authentication by adding this registry entry.
VPN connections fail when using the MS-CHAPv2 authentication - Windows Server | Microsoft Learn
- Select Start > Run, type regedit in the Open box, and then select OK.
- Locate and select the following registry subkey:
HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\RemoteAccess\Policy - On the Edit menu, point to New, and then select DWORD Value.
- Type Enable NTLMv2 Compatibility, and then press ENTER.
- On the Edit menu, select Modify.
- In the Value data box, type 1, and then select OK.
- Exit Registry Editor.
