Deprecating NTLM is Easy and Other Lies We Tell Ourselves

Published Oct 4, 2023 | Posted in Featured

NTLM has been a problem in Windows for a while now. We're finally killing it, and I'm going to tell you how. Read Article

About Steve Syfuhs

Steve Syfuhs is a developer on the Windows Authentication team at Microsoft.

Finding and Killing the Process that Opened Your Port

Published Aug 4, 2023

Finding the process that opened a port is a pain. Doubly so in .NET.

Read Article | Windows

Improvements in Windows Kerberos Architecture

Published Apr 14, 2023

We rewrote the cryptographic services of Kerberos in Windows.

Read Article | Kerberos

Kerberos Event ID 27

Published Nov 24, 2022

Windows system Event 27 is raised when Kerberos can't find a key.

Read Article | Windows

Understanding Windows Authentication

Published Jun 13, 2022

So, you want to understand all the fiddly bits about authentication in Windows?

Read Article | Authentication

How does Remote Credential Guard Work?

Published Feb 26, 2022

Remote Credential Guard is a secure way of connecting to RDP servers.

Read Article | Windows

Windows Hello Cloud Trust

Published Feb 22, 2022

Windows Hello Cloud Trust simplifies deployment considerably.

Read Article | Windows

Why We Built Azure AD Kerberos

Published Dec 2, 2021

Why do we need Azure AD Kerberos?

Read Article | Authentication

Why Thread Readers are Blocked

Published Dec 2, 2021

I block every thread reader to force you to come here.

Read Article | Twitter Thread

How Azure AD Kerberos Works

Published Dec 1, 2021

Azure AD Kerberos is a modern form of Kerberos for hybrid environments.

Read Article | Windows

On Computer Passwords

Published Sep 23, 2021

Computer accounts have passwords. Here's some facts about them.

Read Article | Authentication

A Bit About the Local Security Authority

Published Aug 5, 2021

The Local Security Authority is what oversees the security in Windows.

Read Article | Windows

MFA is Hard to do Right

Published May 7, 2021

MFA is critical to securing the world, but it's hard to do right. Here's why.

Read Article | Authentication

Killing NTLM is Hard

Published May 5, 2021

The NTLM authentication protocol just won't die.

Read Article | Windows

Lessons in Disabling RC4 in Active Directory

Published Mar 2, 2021

Customer lessons learned when disabling RC4 in Active Directory.

Read Article | Active Directory

Blog:	v3.1.8+66a3afaeda
Runtime:	v8.0.7+2aade6beb0