Event 6038, LSA (LsaSrv)


should concerned warning message?

microsoft windows server has detected ntlm authentication presently being used between clients , server. event occurs once per boot of server on first time client uses ntlm server.

ntlm weaker authentication mechanism. please check:

      which applications using ntlm authentication?

      there configuration issues preventing use of stronger authentication such kerberos authentication?

      if ntlm must supported, extended protection configured?

details on how complete these checks can found @ http://go.microsoft.com/fwlink/?linkid=225699.

i'm seeing on both of essentials servers i've setup, 1 migration, other clean install.

ntlm deprecated authentication protocol; in situations kerberos option everything, it's preferred protocol these days. said, there situations ntlm required, , core essentials functionality implements @ least 1 of (could more, i'm not certain).

so long story short, should not extremely concerned. (mildly concerned, perhaps, in sense exposure greater absolutely has if perfectly.)


i'm not on whs team, post lot. :)



Windows Server  >  Windows Server 2012 Essentials



Comments

Popular posts from this blog

some help on Event 540

WMI Repository 4GB limit - Win 2003 Ent Question

Event ID 1302 (error 1307) DFS replication service encountered an error while writing to the debug log file