S
Thu Sep 25 05:38:47 CDT 2003
You're looking at NTLM authentication for NT and Kerberos authentication fof
W2K and W2K3 (with corresponding clients) - both are using cryptography to
secure authentication credentials.
NTLM description on MSDN:
http://msdn.microsoft.com/library/en-us/security/security/microsoft_ntlm.asp.
Make sure you disable legacy LM and NTLMv1 and use NTLMv2 only. Samba
(www.samba.org) implements NTLM and is available in source code.
Kerberos:
http://msdn.microsoft.com/library/en-us/security/security/microsoft_kerberos.asp.
Also look RFCs, particularly - RFC1510. Open source implementations are also
available if you need tech nitty-gritties.
--
Svyatoslav Pidgorny, MVP, MCSE
-= F1 is the key =-
"inquirer" <inquirer2003now@hotmail.com> wrote in message
news:um#krOvgDHA.2292@TK2MSFTNGP10.phx.gbl...
> Hi guys,
>
> Is there any TechNet article explaining the situations that implement
> encryption on BOTH the username AND password credentials that a user sends
> during a typical authentication to a Windows NT/ 2000/ 2003 domain without
> the use of any additional encryption mechanism like IPSec?
>
> or can anyone kindly answer the following
>
> How are user credentials sent over the wire (are they both encrypted?)
> during a typical domain logon process using at least a WinNT client
computer
> on an NT4 domain, Win2K mixed mode domain, and Win2K3 native domain for
> clean install (default) configurations? Is there a suporting Technet
> article expalining this?
>
> Thank you very much.
>
>