How do I enable NTLM authentication in Windows?

How do I know if NTLM authentication is enabled?

How can I tell if
NTLM and/or SPNEGO Authentication are enabled?

Is NTLM required for Kerberos. Authentication, and if so, which one does MSDN recommend and what are its. Recommended SPNs (which is how NTLM and SPNEGO authentication work together). Any help would be greatly appreciated. Thanks. Toby. If you want to see if they're enabled on the server side, you can simply turn on the Windows Event Logging feature on your machine (on any system in Win2K or XP SP2 or later). In Win2K3, you have to right click on the computer you want to start checking, click 'Manage Computer Policy', click 'Computer Configuration' under 'Windows Settings', click 'Administrative Templates', click 'Event Logging' under 'Security Settings', then check the box 'Enable Windows Event Logging'. After doing this, you should see new Events appear in the Event Log window; there is an entry for each event type that triggers an "Access Denied" message when an application attempts to perform an action that it is not permitted to perform due to insufficient permission.

You could add some of these entries to a log viewer like Procmon, to determine the name of the application that was attempting access, and from there attempt to reverse-engineer it's permissions.

How do I enable automatic authentication using NTLM?

I'm trying to configure a web server (on a Windows Server 2008) to enable NTLM for all the IIS sites (http and https). All is working well, except when I try to authenticate a user who has successfully logged into the domain. The only information I get from the system are the following entries in the event viewer: Application. Event ID: 1398. Application Name: OVHiisextendedsecurity. Task Category: IIS Web Server. Event Xml: . . . 1398. 3. 1. 0x80000000000000. 4969. System. Omega-4-PC. . . . . . . 1168. administrator. administrator. administrator. contoso.com . . Is it normal for the server to be able to authenticate a user when he is still authenticated in another domain? Thanks. Your problem is that the machine Omega-4-PC is not in the same domain as contoso.

How do I enable NTLM authentication in Windows?

Is it possible to have a combination of both type of authentication in the same machine? If yes, how? I have read the MSDN documentation about Kerberos and NTLM, but didn't found any option to switch on/off these two authentication mechanisms in the same machine. I have seen in some answers here at StackOverflow that there is no way to do this. But if there is such a way please let me know.

NTLM and Kerberos are entirely separate options. You can't turn one on and the other off.