Microsoft waxaa ku jira NTML  ama  NT LAN Manager Protocol gudaha Windows NT ujeeddooyin xaqiijineed aasaasi ah - oo waxay isku dayday inay horumariso ammaankeeda iyadoo soo bandhigtay aqoonsiga Kerberos^{(Kerberos authentication)} . Si kastaba ha ahaatee, NTML Protocol ayaa wali lagu isticmaalaa shabakadaha Domain Windows^{(Windows Domain Networks)} . Maqaalkan, waxaan ku arki doonaa sida loo joojiyo Xaqiijinta NTML^{(NTML Authentication)} ee Windows Domain .

Dami Xaqiijinta NTML^{(NTML Authentication)} gudaha Windows Domain^{(Windows Domain)}

Waxaa jiri kara sababo badan oo aad u rabto inaad joojiso Xaqiijinta NTML^{(NTML Authentication)} gudaha Windows Domain . Qaar ka mid ah sababaha ugu caansan waa:

1. NTML ma aha mid sugan oo waxay bixisaa sir daciif ah.
2. Xaaladda NTML , xashiishkaaga eraygaaga sirta ah waxa lagu kaydin doonaa Adeegga LSA^{(LSA Service)} . Waxaa si fudud u soo saari kara weeraryahan.
3. Way u nugushahay  werarada Dhexgalka Xogta^{(Data Interception attacks)} maadaama ay jirto la'aanta xaqiijinta wadajirka ah ee u dhaxaysa macmiilka iyo serferka.

Ka dib markaan ogaanno sababaha loo joojiyo Xaqiijinta NTML^{(NTML Authentication)} , aan aragno sababaha loo joojiyo.

Kuwani waa siyaabaha aan u joojin doono Xaqiijinta NTML^{(NTML Authentication)} ee Windows Domain .

1. By Tifaftiraha Siyaasadda Kooxda Maxaliga
2. By Tifaftiraha Diiwaanka

Aynu si faahfaahsan uga hadalno iyaga.

1] By Tifaftiraha Siyaasadda Kooxda

Kahor intaanan damin NTML^(NTML) , waxaan u baahanahay inaan hubino inaadan isticmaalin borotokoolka aan la ilaalin ie; NTMLv1 ama NTML Nooca 1^{(NTML Version 1)} . Tani waxay ka dhigi kartaa boggaaga mid u nugul weerarka. Marka aad taas dhammayso, raac habka soo socda si aad u damiso Xaqiijinta NTML^{(NTML Authentication)} ee Windows Domain ee Tifaftiraha Siyaasadda Kooxda^{(Group Policy Editor)} .

Si taas loo sameeyo, ka fur menu -ka Start ee Tifaftiraha Siyaasadda Kooxda Maxaliga ah ^{(Local Group Policy Editor )} . Tag meesha soo socota.

Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options

Hadda, laba-guji  Amniga Shabakada: Heerka xaqiijinta Maareeyaha LAN. ^{(Network Security: LAN Manager authentication level. )}Dooro  jawaabta NTMLv2 la diray oo kaliya. Ka diid LM & NTML ^{(Sent NTMLv2 response only. Refuse LM & NTML )} tab "Settings Security Settings".

Guji  Apply > Ok  iyo NTML xaqiijinta waa la joojin doonaa boggaaga.

2] By Tifaftiraha Diiwaanka

Haddii aadan haysan Tifaftiraha Siyaasadda Kooxda^{(Group Policy Editor)} , waxaad ka joojin kartaa NTML Tifaftiraha ^(NTML)Diiwaanka^{(Registry Editor)} . Si fudud ayaad taas u samayn kartaa, adigoo kaashanaya xalalka fudud qaarkood.

Ka soo billow  Tifaftiraha Diiwaanka ^{(Registry Editor )} ka bilow Menu^{(Start Menu)} oo u gudub meesha soo socota.

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lsa

Hadda, midig-guji  Lsa  oo dooro  New > DWORD (32-bit) Value. Magaca " LmCompatibilityLevel " oo u dhig  xogta  Qiimaha  ^{(Value data )}5.  5 sababtoo ah waxay u dhigantaa " Jawaabta NTMLv2 ee la diray oo keliya. Diid LM & NTML”.^{(Sent NTMLv2 response only. Refuse LM & NTML”.)}

Sidan waxaad awoodi doontaa inaad damiso NTML by Registry Editor .

Akhri soo socda: ^{(Read Next: )}sababta iyo sida loo joojiyo SMBI Windows 10

How to Disable NTLM Authentication in Windows Domain

Microsoft includes NTML or NT LAN Manager Protocol in Windows NT for basic authentication purposes – and has tried enhancing its security by introducing Kerberos authentication. However, NTML Protocol is still used in Windows Domain Networks. In this article, we are going to see how to disable NTML Authentication in Windows Domain.

Disable NTML Authentication in Windows Domain

There can be multiple reasons why you may want to disable NTML Authentication in Windows Domain. Some of the most common reasons are:

1. NTML is not secure and offers weak encryption.
2. In the case of NTML, your password hash will be stored in LSA Service. It can be easily extracted by an attacker.
3. It is vulnerable to Data Interception attacks as there is a lack of mutual authentication between the client and the server.

After knowing the reasons to disable NTML Authentication, let’s see the reasons to disable it.

These are the ways by which we are going to disable NTML Authentication in Windows Domain.

1. By Local Group Policy Editor
2. By Registry Editor

Let us talk about them in detail.

1] By Group Policy Editor

Before disabling NTML, we need to make sure that you are not using its most unprotected protocol i.e; NTMLv1 or NTML Version 1. This can make your domain vulnerable to attackers. Once you are done with that, follow the following method to disable NTML Authentication in Windows Domain by Group Policy Editor.

To do that, open Local Group Policy Editor from the Start menu. Go to the following location.

Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options

Now, double-click on Network Security: LAN Manager authentication level. Select Sent NTMLv2 response only. Refuse LM & NTML from the “Local Security Settings” tab.

Click Apply > Ok and NTML authentication will be disabled on your domain.

2] By Registry Editor

If you don’t have Group Policy Editor, you can disable NTML from the Registry Editor. You can easily do that, with the help of some simple solutions.

Launch Registry Editor from the Start Menu and navigate to the following location.

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Lsa

Now, right-click on Lsa and select New > DWORD (32-bit) Value. Name it “LmCompatibilityLevel” and set Value data to 5. 5 because it corresponds to “Sent NTMLv2 response only. Refuse LM & NTML”.

This way you will be able to disable NTML by Registry Editor.

Read Next: Why and How to disable SMBI on Windows 10

Related posts

• Sida loo beddelo Heerka Xaqiijinta Maareeyaha LAN gudaha Windows 11/10

• Sida loo isticmaalo Network Sniffer Tool PktMon.exe gudaha Windows 10

• Daar xiriirinta Shabakadda intaad ku jirto heeganka casriga ah Windows 11/10

• Daar ama dami Wi-Fi iyo adabtarada Ethernet Windows 11

• Sida loo khariidado Network Drive ama loogu daro FTP Drive gudaha Windows 11/10

• Sida loo Khariideeyo Shabakadda Drive-ka iyadoo la adeegsanayo Siyaasadda Kooxda ee Windows 11/10

• Waa maxay sababta wakhtiga Pingygu aad ugu sarreeyo gudaha Windows 11/10?

• Hagaaji marinka gaabis ee shabakada wadista ka Windows 10

• Aaladaha Shabakadda Wireless-ka ee bilaashka ah ee loogu talagalay Windows 10

• Xakamaynta Domain Directory ee firfircoon ee bogga lama xiriirin karo

• Sida loo abuuro Warbixinta Adapter Network ee Wi-Fi Windows 10

• Sida loo isticmaalo Qalabka Query Port (PortQry.exe) gudaha Windows 11/10

• Sida loo dejiyo Ciwaanka IP Static gudaha Windows 11/10

• NetTraffic: Kormeeraha taraafikada shabakada waqtiga dhabta ah ee Windows 11/10

• Gudbinta Ping ayaa ku guuldareysatay Khaladka guud ee fashilka gudaha Windows 11/10

• Sida loo wadaago faylasha u dhexeeya kombiyuutarada isticmaalaya LAN gudaha Windows 11/10

• Sida loogu daro Profile Network Wi-Fi cusub gudaha Windows 10

• Hagaaji qaladka Xaqiijinta Gateway ee AT&T U-Verse

• Sida dib loogu dejiyo Winsock gudaha Windows 11/10

• Ku samee Hantidhawrka Shabakadda leh Alloy Discovery Express ee Windows 11/10