Setting NTLM

When you use Access Appliance in AD domain mode, there is an optional configuration step that can be done. You can disable the use of Microsoft NTLM (NT LAN Manager) protocol for authenticating users.

When the Access Appliance CIFS service is running in the standalone mode (with security set to user) some versions of the Windows clients require NTLM authentication to be enabled. You can do this by setting the value of ntlm_auth to yes by using the CIFS> set ntlm_auth yes command.

When NTLM is disabled and you use Access Appliance in AD domain mode, the available authentication protocols are Kerberos and NTLMv2. The one used depends on the capabilities of both the Access Appliance clients, and domain controller. If no special action is taken, Access Appliance allows the NTLM protocol to be used.

For any specific CIFS connection, all the participants, that is the client machine, Access Appliance and the domain controller select the protocol that they all support and that provides the highest security. In the AD domain mode, Kerberos provides the highest security.

To disable NTLM

If the server is running, enter the following:
```
CIFS> server stop
```
To disable NTLM, enter the following:
```
CIFS> set ntlm_auth no
```
To start the CIFS service, enter the following:
```
CIFS> server start
```

To enable NTLM

If the server is running, enter the following:
```
CIFS> server stop
```
To enable the NTLM protocol, enter the following:
```
CIFS> set ntlm_auth yes
```
To start the CIFS service, enter the following:
```
CIFS> server start
```

Setting NTLM

Feedback

Feedback