NTLMv1 Feature Request #28
Description
From Jason Kent:
next time you update the windows auditing script, would you consider adding checks for NTLMv1?
Microsoft defines five security levels, the ideal configuration is NTLMv2 only
These levels can be configured via the Group Policy setting Network Security: LAN Manager Authentication Level under Computer Configuration => Windows Settings => Security Settings => Local Policies => Security Options.
Group Policy setting for NTLM security levels
The initial four levels specify the protocol requested by the clients. The numbering begins at zero, corresponding to the value of the respective registry key:
Send LM and NTLM responses
Send LM and NTLM (use NTLMv2 session security if negotiated)
Send NTLM response only
Send NTLMv2 response only