L’autenticazione NTLM si configura con la chiave HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\LSA\LMCompatibilityLevel
· 0 =Send LAN Manager (LM) responses and NTLM responses.
Client computers send LM responses and NTLM responses. Client computers never use NTLMv2 session security. Domain controllers accept LM authentication, NTLM authentication, and NTLMv2 authentication.
(Default per Windows XP e Windows 2000)
· 1 Send LM authentication and NTLM authentication and use NTLMv2 session security if negotiated.
Client computers use LM authentication and NTLM authentication. Client computers use NTLMv2 session security if the server supports NTLMv2 session security. Domain controllers accept LM authentication, NTLM authentication, and NTLMv2 authentication.
· 2 Send only NTLM responses.
Client computers use only NTLM authentication. Client computers use NTLMv2 session security if the server supports NTLMv2 session security. Domain controllers accept LM authentication, NTLM authentication, and NTLMv2 authentication.
(Default per Windows server 2003, Windows Server 2003 R2)
· 3 Send only NTLMv2 responses.
Client computers use only NTLMv2 authentication. Client computers use NTLMv2 session security if the server supports NTLMv2 session security. Domain controllers accept LM authentication, NTLM authentication, and NTLMv2 authentication.
(Default per Windows Vista, Windows 7, Windows Server 2008, Windows Server 2008 R2)
· 4 Send only NTLM responses and refuse LM authentication.
Client computers use only NTLM authentication. Client computers use NTLMv2 session security if the server supports NTLMv2 session security. Domain controllers refuse LM authentication. Domain controllers accept NTLM authentication and NTLMv2 authentication.
· 5 Send only NTLMv2 responses and refuse LM authentication and NTLM authentication.
Client computers use only NTLMv2 authentication. Client computers use NTLMv2 session security if the server supports NTLMv2 session security. Domain controllers refuse LM authentication and NTLM authentication. Domain controllers accept only NTLMv2 authentication
Per ulteriori informazioni si vedano: