0

Q1) How do I force Windows 7 client to always use Kerberos authentication protocol talking to other machines on network irrespective of whether using host name or IP address?

Q2) Similarly, how do I force Windows 7 client to always use NTLM authentication protocol talking to other machines on network irrespective of whether using host name or IP address?

Please let me know if there is any registry settings to achieve the same.

  • Please clarify; are you assuming that these options are opposing or mutually exclusive? NTLM and Kreberos are not commonly used by the same protocols so its not an either or scenario. – Frank Thomas Nov 8 '17 at 19:43
  • I recently experienced issue that I am unable to connect shared folder (using map network drive as it requires credentials of different user account rather than logged on user account) using host name of server where network share resides. However, I am able to access network share via IP address successfully. I checked and found that Name resolution is also working fine. So DNS is not as cause of issue. Only thing I can come up with from the top of my head is that name uses Kerberos when authenticating but IP uses NTLM. – Alex Nov 8 '17 at 20:09
  • 1
    @FrankThomas: That's not true; SMB has had Kerberos support via SPNEGO for many, many years. (I've used it even with Windows XP against both Windows and Samba 3.) – grawity Nov 8 '17 at 20:13
  • @Alex: support.microsoft.com/en-us/help/322979/… – grawity Nov 8 '17 at 20:15
  • So do you mean that accessing network share / shared folder never uses Kerberos authentication irrespective of Host name or IP address of server where share resides? – Alex Nov 8 '17 at 20:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.