RunAs Radio · 2025-10-15 · 54 min
It's time to retire NTLM - but how? Richard chats with Steve Syfuhs about the need and challenge of retiring an ubiquitous authentication protocol first used in the 1990s. While guidance to move away from NTLM has been available since 2010, it has only become feasible in the past couple of years, and Microsoft is now providing tooling to make the transition easier. Steve discusses enabling auditing of NTLM usage - recent improvements will allow you to view which services rely on NTLM. Sometimes, a configuration change can resolve the problem, and now there is Microsoft Negotiate to help as an intermediary in determining which protocol to use. Retiring NTLM won't happen overnight, but it will happen, and you can start preparing for it today. And if you need help or advice, email ntlm@microsoft.com ! Links NTLM Blocking and You Deprecating NTLM is Easy and Other Lies Microsoft Negotiate Remote Desktop Gateway Role Kerberos on Windows Server The Evolution of Windows Authentication Recorded September 25, 2025
Other episodes covering the same guests and topics, from across The B2B Podcast Index.
The Evolution of Modern GRC ft. James Huang, Head of GRC @ GongSecurity & GRC Decoded · on security86 / 100
Episode 120: The Zero Trust Workshop (and so much more!)The Azure Security Podcast · on Kerberos86 / 100
Trump's Golden Post-Quantum EO(s)Security Cryptography Whatever · on security80 / 100
Edge AI Security: Why Secure-by-Design Engineering MattersEmbedded Insiders · on security79 / 100
AI Cyber is expanding a Vulnerability GapThe Enterprise AI Show · on security50 / 100
Cybersecurity Awesomeness Podcast - Episode 168Cybersecurity Awesomeness Podcast · on security
The Content Management System Landscape with Matt Garrepy80 / 100
AI-Accelerated Supply Chain Attacks with Mackenzie Jackson83 / 100
Ransomware Readiness with Heather Renze
Azure Virtual Desktop Hybrid with Travis Roberts
Security Begins at Procurement with Jessie Schofer