Cybersecurity

In the evolving cybersecurity landscape, staying updated with the latest protective measures is crucial for any business. Microsoft is transitioning from the New Technology LAN Manager (NTLM) to Kerberos, and here's what this means for your company's cybersecurity.

 

What Is An Authentication Protocol?

An authentication protocol is the foundational security mechanism that verifies users' identities when trying to access network resources. Think of it as a digital handshake that ensures the right person is at the other end of a connection. While NTLM used to be the go-to protocol, performing this handshake by verifying a user's credentials against a database, it's now being replaced due to emerging security challenges.

 

The Shift from NTLM to Kerberos

Microsoft has recognized that NTLM's defenses are no longer as robust as they once were, making it more vulnerable to sophisticated cyber-attacks. This vulnerability is a significant concern for businesses, as it can lead to unauthorized data access.

Kerberos, the new protocol chosen by Microsoft, is a more secure and updated solution. Unlike NTLM, Kerberos uses a more complex method of issuing time-bound 'tickets' to users that prove their identity. This method makes it significantly more difficult for unauthorized users to gain access.

 

The Benefits of Kerberos Over NTLM

Kerberos brings several key advantages to the table:

  • Better Encryption: It disguises password information as it travels across networks, making it hard for interlopers to decipher.
  • Two-Way Verification: Both the user and the server double-check each other's credentials, providing a two-factor authentication process.
  • Streamlined Authentication: It's designed for quicker logins, meaning users have less waiting time.
  • Cross-Platform Compatibility: Kerberos is versatile and can be integrated into various network environments, not just Windows.

Microsoft is carefully phasing out NTLM in Windows 11 and replacing it with Kerberos, significantly enhancing security for all users.

 

What This Means for Your Business

For businesses using Windows 11, it's time to make sure your security systems are up to date with Kerberos. IT departments need to check that systems can handle the new protocol and provide the necessary training for your team.

Adopting Kerberos means your business will be better equipped to deal with the threats lurking in the cyber landscape. This isn't just about following the latest trends but proactively protecting your operations and sensitive data. In making this shift, you're not just keeping up but staying ahead, ensuring that your business remains safe and secure as technology evolves.

Get an expert for this change.

 


 

Additional Information

Microsoft: The evolution of Windows authentication

Bleeping Computer: Windows Kerberos authentication breaks after November updates

 


 

Please sign up for our newsletter above

 

By Denis Wilson

Cybersecurity Expert, Small Business Technology Consultant, Managed Services Provider, Managed IT Support

Thanks for reading this post. I always take into mind that your time and attention are precious. And these posts need to be timely, to the point, and short. For more tips on thriving with small business technology, check out the other blog posts at DWPIA Blogs. You can also find me on LinkedIn, YouTube, and Facebook

I am also a published author and speaker on cloud computing, work-from-anywhere, and cybersecurity. I work extensively with business and professional associations to provide small business technology education programs.

Contact me if you have any questions about the subject. I'd be happy to spend 15 minutes discussing it with you.