Subject:  Configure Workstations for NTLMv2
Date:     Fri Apr  9 00:20:02 PDT 2004
From:     Pamela Y. C. Fong


On March 23, 2004, the ITS Windows Cluster began enforcing
the use of the stronger NTLMv2 authentication protocol.

Consequently, users may need to reconfigure their Windows
and Mac OS X computers to be able to connect to remote ITS,
HAL-LAB, Math, and other campus Windows resources.  Instructions
and motivations are described briefly by the ITS web document,

  http://www.its.caltech.edu/win/ntlmv2.html

Instructions for reconfiguring Windows XP Pro workstations,
which I verified to work for our lab are as follows:

  Start|Settings|Control Panel|Administrative Tools|
    Local Security Policy
      Security Settings
        Local Policies
          Security Options
 
  Locate the setting,
    Network security:  LAN Manager authentication
 
  Alter the level of this setting to be,
    Send NTLMv2 response only

I'm making my way to reconfigure all Windows XP rigs in
the lab for these settings.  So far, they have been applied
to the following computers:

  Endorphin
  Orexin
  Gaba
  Ampa
  Neurotensin
  Glutamate
  Galanin
  Hartline2

---Pam