Microsoft Initiates NTLM Phase-Out to Enhance Windows Security

Microsoft has announced a three-phase plan to phase out New Technology LAN Manager (NTLM) in favor of stronger, Kerberos-based authentication options. This move is part of the company's efforts to strengthen Windows environments and reduce the risk of relay attacks and other vulnerabilities associated with NTLM.

The decision to deprecate NTLM comes more than two years after Microsoft first revealed its plans, citing the technology's susceptibility to weaknesses that could facilitate malicious activities. The three-stage approach aims to provide a gradual transition to Kerberos-based options, minimizing disruptions to Windows users and administrators.

Also Read: macOS Under Siege: Python Infostealers Spread via Fake Ads and Installers
  • Phase 1: Microsoft will begin by introducing Kerberos-based alternatives for key NTLM features, allowing users to opt-in for the new authentication methods.
  • Phase 2: The company will gradually disable NTLM for non-essential services, encouraging users to adopt Kerberos-based options for improved security.
  • Phase 3: Finally, Microsoft will completely phase out NTLM, making Kerberos the default authentication protocol for Windows environments.

This shift towards Kerberos-based options is expected to significantly enhance the security posture of Windows environments, reducing the risk of cyber attacks and data breaches. As Microsoft continues to invest in the development of more secure authentication protocols, users can expect improved protection against emerging threats.

A breach is not a matter of IF, it is a matter of WHEN.

Common Industry Saying