[Samba] samba 4.5.10 and old clients with NTLMv1

Stefan G. Weichinger lists at xunil.at
Thu Jul 27 11:22:36 UTC 2017


Am 2017-07-27 um 12:41 schrieb Andrew Walker via samba:
> In an AD environment, it's better to push out a GPO to force WindowsXP to
> use NTLMv2. I believe it's under "Security Settings" -> "Local Security
> Policy" -> "Security Options" -> "Network security: LAN Manager
> authentication level". Change the value to "Send NTLMv2 response
> only\refuse LM and NTLM"
> 
> If there's no AD involved, you can manually change the associated Windows
> registry entry "LmCompatibilityLevel" to "3". I believe it is under "
> HKLM\SYSTEM\CurrentControlSet\Control\Lsa"

Ah, good, I might look into the 3 VMs and change that.
No AD/GPOs available here, just standalone samba.
thanks





More information about the samba mailing list