Uploaded March 2026 | Updated September 2026, 35 minutes ago
NTLM (New Technology LAN Manager) in Windows 11 is being phased out in favor of more secure protocols like Kerberos. Learn the history of NTLM and the associated security risks. Explore how auditing can expose legacy dependencies in storage traffic, then find out how IAKerb, Local KDC, and auto-redirect can fill Kerberos gaps so that you feel confident and prepared ahead of NTLM disablement in Windows.
techcommunity.microsoft.com/event/windowsevents/the-latest-in-windows-11-security/4490530
This session is part of the Microsoft Technical Takeoff: Windows + Intune: https://aka.ms/TechTakeoff
0:00 – Welcome and introduction
0:50 – A deep-dive on NTLM – what is NTLM? And what are the associated security risks?
3:33 – NTLM auditing – Auditing NTLM usage and legacy dependencies
5:01 – More Kerberos, better security – introducing upcoming Kerberos enhancements
16:53 – Disabling NTLM by default – roadmap to disabling NTLM in Windows
18:31 – Learn more
NTLM (New Technology LAN Manager) in Windows 11 is being phased out in favor of more secure protocols like Kerberos. Learn the history of NTLM and the associated security risks. Explore how auditing can expose legacy dependencies in storage traffic, then find out how IAKerb, Local KDC, and auto-redirect can fill Kerberos gaps so that you feel confident and prepared ahead of NTLM disablement in Windows.
techcommunity.microsoft.com/event/windowsevents/the-latest-in-windows-11-security/4490530
This session is part of the Microsoft Technical Takeoff: Windows + Intune: https://aka.ms/TechTakeoff
0:00 – Welcome and introduction
0:50 – A deep-dive on NTLM – what is NTLM? And what are the associated security risks?
3:33 – NTLM auditing – Auditing NTLM usage and legacy dependencies
5:01 – More Kerberos, better security – introducing upcoming Kerberos enhancements
16:53 – Disabling NTLM by default – roadmap to disabling NTLM in Windows
18:31 – Learn more
