Sysadmin

12 readers

1 users here now

A reddit dedicated to the profession of Computer System Administration.

founded 2 years ago

MODERATORS

[email protected]

Print spooler using NTLMv2 not Kerberos, Named piped registry set, no cname records for servers (zerobytes.monster)

submitted 11 months ago by [email protected] to c/[email protected]

0 comments fedilink hide all child comments

This is an automated archive.

The original was posted on /r/sysadmin by /u/RestinRIP1990 on 2024-01-23 13:52:11+00:00.

In an effor to reduce ntlm authentication, I have built an ELK based dash to monitor any NTLM auths in the enterprise. I was able to get rid of a lot, however one that is sticking is the print servers on the network.

The issue is as described here:

I have made this registry change organization wide, and it seemingly does not work. I have run a query on this key and it is set on every machine. I am not sure how to procede further. klist shows valid tickets for the print servers as well

no comments (yet)

sorted by: hot top controversial new old

there doesn't seem to be anything here