Deprecating NTLM is Easy and Other Lies We Tell Ourselves

Published Oct 4, 2023 | Posted in Featured

NTLM has been a problem in Windows for a while now. We're finally killing it, and I'm going to tell you how. Read Article

About Steve Syfuhs

Steve Syfuhs manages the Windows Authentication team at Microsoft.

Finding and Killing the Process that Opened Your Port

Published Aug 4, 2023

Finding the process that opened a port is a pain. Doubly so in .NET.

Read Article | Windows

Improvements in Windows Kerberos Architecture

Published Apr 14, 2023

We rewrote the cryptographic services of Kerberos in Windows.

Read Article | Kerberos

Kerberos Event ID 27

Published Nov 24, 2022

Windows system Event 27 is raised when Kerberos can't find a key.

Read Article | Windows

Understanding Windows Authentication

Published Jun 13, 2022

So, you want to understand all the fiddly bits about authentication in Windows?

Read Article | Authentication

How does Remote Credential Guard Work?

Published Feb 26, 2022

Remote Credential Guard is a secure way of connecting to RDP servers.

Read Article | Windows

Windows Hello Cloud Trust

Published Feb 22, 2022

Windows Hello Cloud Trust simplifies deployment considerably.

Read Article | Windows

Why We Built Azure AD Kerberos

Published Dec 2, 2021

Why do we need Azure AD Kerberos?

Read Article | Authentication

Why Thread Readers are Blocked

Published Dec 2, 2021

I block every thread reader to force you to come here.

Read Article | Twitter Thread

How Azure AD Kerberos Works

Published Dec 1, 2021

Azure AD Kerberos is a modern form of Kerberos for hybrid environments.

Read Article | Windows

On Computer Passwords

Published Sep 23, 2021

Computer accounts have passwords. Here's some facts about them.

Read Article | Authentication

A Bit About the Local Security Authority

Published Aug 5, 2021

The Local Security Authority is what oversees the security in Windows.

Read Article | Windows

MFA is Hard to do Right

Published May 7, 2021

MFA is critical to securing the world, but it's hard to do right. Here's why.

Read Article | Authentication

Killing NTLM is Hard

Published May 5, 2021

The NTLM authentication protocol just won't die.

Read Article | Windows

Lessons in Disabling RC4 in Active Directory

Published Mar 2, 2021

Customer lessons learned when disabling RC4 in Active Directory.

Read Article | Active Directory

Blog:	v3.1.9+619aeb64c2
Runtime:	v9.0.0+9d5a6a9aa4