asteroza + ntlm   14

Configuring Kerberos for IP Address | Microsoft Docs
So SMB using IP's downgrades to NTLM, but if you set up W10/2016 with this, can use IP SPN's and kerberos to halt some of the pass-the-hash stuff. Unfortunately the IP SPN's don't autoupdate so you're boned in a DHCP environment...
security  kerberos  windows  10  2016  SMB  SPN  IP  address  NTLM 
june 2019 by asteroza

Copy this bookmark: