Microsoft rolls out new Kerberos protections to block RC4 encryption, with enforcement mode becoming mandatory for domain ...

Server: Fully-patched 2008 R2, running Certificate Services. The /certsrv virtual directory is using (I believe) default settings. Specifically, this means it's using Windows Authentication, with NTLM ...

The Windows security updates from January herald the phase-out of insecure RC4 encryption. A vulnerability requires action.

The Kerberos authentication method originated at the Massachusetts Institute of Technology in the 1980s, as part of a project called Athena. The project involved integrating the computers on the MIT ...

While Windows IT professionals deal with security on a daily basis, very few understand the under-the-hood protocol, Kerberos. Kerberos is a security protocol in Windows introduced in Windows 2000 to ...

Microsoft has issued out-of-band (OOB) updates to address authentication failures on domain controllers that run all currently supported editions of Windows Server. According to the security advisory, ...

Microsoft Improves Windows Security with a Path to Move Off NTLM Your email has been sent It’s time to stop relying on the insecure authentication protocol built into Windows. Microsoft is making it ...

Hi all,<BR><BR>I'm a OS X Server noob, but I'm trying to manage as best as I can. I have a Leopard Sever setup as an OD master on a Xeon Xserve (10.5.7) which is having odd problems. New users I ...

Several readers responded to my previous post on pass-the-hash attacks, asking if Kerberos authentication versus LANManager, NTLM, or NTLMv2 was an effective defense. It’s a good question, one that I ...