0

Q1) How do I force Windows 7 client to always use Kerberos authentication protocol talking to other machines on network irrespective of whether using host name or IP address?

Q2) Similarly, how do I force Windows 7 client to always use NTLM authentication protocol talking to other machines on network irrespective of whether using host name or IP address?

Please let me know if there is any registry settings to achieve the same.

Improve this question
15
  • Please clarify; are you assuming that these options are opposing or mutually exclusive? NTLM and Kreberos are not commonly used by the same protocols so its not an either or scenario.
    – Frank Thomas
    Nov 8, 2017 at 19:43
  • I recently experienced issue that I am unable to connect shared folder (using map network drive as it requires credentials of different user account rather than logged on user account) using host name of server where network share resides. However, I am able to access network share via IP address successfully. I checked and found that Name resolution is also working fine. So DNS is not as cause of issue. Only thing I can come up with from the top of my head is that name uses Kerberos when authenticating but IP uses NTLM.
    – Alex
    Nov 8, 2017 at 20:09
  • 1
    @FrankThomas: That's not true; SMB has had Kerberos support via SPNEGO for many, many years. (I've used it even with Windows XP against both Windows and Samba 3.)
    – u1686_grawity
    Nov 8, 2017 at 20:13
  • @Alex: support.microsoft.com/en-us/help/322979/…
    – u1686_grawity
    Nov 8, 2017 at 20:15
  • So do you mean that accessing network share / shared folder never uses Kerberos authentication irrespective of Host name or IP address of server where share resides?
    – Alex
    Nov 8, 2017 at 20:19

0

Reset to default

You must log in to answer this question.

Browse other questions tagged .