Indiana University
University Information Technology Services
  
What are archived documents?
Login>>
Login

Login is for authorized groups (e.g., UITS, OVPIT, and TCC) that need access to specialized Knowledge Base documents. Otherwise, simply use the Knowledge Base without logging in.

Close

ARCHIVED: LM, NTLM, and NTLMv2 on the IU network

At Indiana University, the only authentication protocols accepted are NT LAN Manager Version 2 (NTLMv2) and Kerberos. For reasons of security and reliability, UITS does not support LAN Manager (LM) and NT LAN Manager Version 1 (NTLMv1) authentication protocols on the IU network. Thus, if you are using versions of Windows earlier than Windows 2000, or Mac operating systems earlier than Mac OS X 10.5, you cannot use network resources such as mapped network drives and Residential Technology Center (RTC) printers.

Microsoft no longer provides critical security updates for versions of Windows earlier than 2000. Therefore, UITS recommends that you use only Windows 7, Vista Enterprise or Ultimate, or XP Professional on Windows computers connected to the IU network. Mac users who need full access to Exchange should use either Outlook 2011 or Entourage 2008, Web Services Edition; if you have Mac OS X 10.6 or later, you can use Mail as well. Mac users who must perform tasks requiring ADS authentication, such as file sharing with Windows computers, must use Mac OS X 10.5 or higher.

Computers joined to IU's Active Directory now automatically receive settings from the network that disable LM and NTLMv1, so if you connect to ADS, you likely don't need to disable these protocols manually. However, if your computer is not joined to ADS, you must change the settings yourself. UITS has developed a free Windows Authentication Update tool (available on IUware) to disable insecure LM and NTLMv1 authentication protocols in Windows 2000 and higher; see What is the tool that disables LM/NTLMv1, and where can I get it?

If you have problems running the tool, you can also change your settings manually; see How can I use the local security settings to force NTLMv2?

This is document atpq in domain all.
Last modified on October 24, 2012.

I need help with a computing problem

  • Fill out this form to submit your issue to the UITS Support Center.
  • Please note that you must be affiliated with Indiana University to receive support.
  • All fields are required.



Please provide your IU email address. If you currently have a problem receiving email at your IU account, enter an alternate email address.

I have a comment for the Knowledge Base

  • Fill out this form to submit your comment to the IU Knowledge Base.
  • If you are affiliated with Indiana University and need help with a computing problem, please use the I need help with a computing problem section above, or contact your campus Support Center.