First published on TechNet on Oct 08, 2009 Ned here again. Windows 7 and Windows Server 2008 R2 introduce a long sought feature known as NTLM blocking. This prevents NTLM from being used for ...
Updated Oct 11, 2023
Version 4.0
Blog Post
10 MIN READ
NTLM Blocking and You: Application Analysis and Auditing Methodologies in Windows 7
@Squirrel215 here. Using my Work account.
Brij_Kishore & Ted_Asuncion to solve the spooler and NTLM you need to add the following two registry keys on your workstations and servers. We pushed these out via GPO to all servers and have been using it since Nov 2022. This remove 95% of our NTLM authentication on our network and resumed the spooler to use Kerberos.
From the post at https://www.reddit.com/r/sysadmin/comments/qcdi5y/potential_issues_on_active_directory_domain/
| Hive | HKEY_LOCAL_MACHINE |
| Key path | SOFTWARE\Policies\Microsoft\Windows NT\Printers\RPC |
| Value name | RpcNamedPipeAuthentication |
| Value type | REG_DWORD |
| Value data | 0x2 (2) |
Edit: Removed 2nd key that was not needed