Microsoft to Phase Out NTLM for Kerberos in Windows 11

  • 18 October 2023
  • 3 comments
  • 75 views

Userlevel 7
Badge +9

In order to address security challenges posed by NTLM in our ever-changing digital world. Microsoft has decided to phase out NTLM in Windows 11 by default.

Some of you are already aware of this change! You can read more here: https://techcommunity.microsoft.com/t5/windows-it-pro-blog/the-evolution-of-windows-authentication/ba-p/3926848

I have also written an interesting piece on this topic on why NTLM is still lying around despite the security weakness and how Kerberos will remediate the need for NTLM: https://techdirectarchive.com/2023/10/15/bidding-farewell-to-ntlm-in-favour-of-kerberos/

You can also read some discussion points on the Veeam R&D Forum: https://forums.veeam.com/veeam-backup-replication-f2/veeam-servers-ntlm-disable-t71861.html

Kerberos is supported in Veeam Backup and Replication version 12  for all components of the backup infrastructure. You can read more here: https://helpcenter.veeam.com/docs/backup/vsphere/kerberos_authentication.html?ver=120


3 comments

Userlevel 7
Badge +20

This is interesting for sure. Will do more reading from the links you posted. Thanks for sharing 👍

Userlevel 7
Badge +7

@Iams3le Thanks for sharing. I will have a look.

Userlevel 6
Badge +3

Woohoo, goodbye to NTLM :) Interesting how they’re approaching Kerberos for local accounts, that’ll be one to watch when it comes to server….

Comment