LM Compatibility Level

John Ackart john.ackart at gmail.com
Wed May 21 17:25:21 GMT 2008


A quote from this article:
http://technet2.microsoft.com/windowsserver/en/library/878d2bbf-fa00-4e5a-bd63-781d17cdd3471033.mspx?mfr=true

suggests that you can set LM compatibility level to 4 just for the IAS 
server. Specifically, the article says:

"Servers running IAS (or RADIUS) and Routing and Remote Access use 
NTLMv1 to authenticate their clients' domain credentials. This means 
domain controllers that need to authenticate those clients cannot be 
configured to accept only NTLMv2 authentication. However, starting with 
Windows Server 2003 SP1, it is possible for a domain controller to 
accept NTLMv1 from servers running IAS and remote access service but 
NTLMv2-only for all other authentication requests."

Does anyone know the mechanism used to achieve this.

Thanks.

John.



More information about the samba-technical mailing list