4

How can I know / see if my windows is using NTML, LM, NTML2 for its user account passwords?

What is the standard today, in windows systems?

Improve this question

1 Answer 1

Reset to default
3

Currently windows uses NTLMv2 to store the password, but for backward compatibility some system uses LM hashes. Now it is recommended by the Microsoft to not to use LM method to store the password because of its weakness towards brute force attacks. If you want to see currently which method is used then you have to navigate to HKEY_LOCAL_MACHINE\System\CurrentControlSet\Control\LSA. You will see the entry named NoLMhash with the DWORD value 1. It means LM hash storage is disabled in your system.

On the same location you can see the name LmCompatibilityLevel edit that and see the value associated with it and if the value is 0, 1 or 2 then force the system to use only NTLMv2 by changing that value to 3.

If you are in the LAN then you can check which method is used by your system to communicate to the servers by capturing the packet using any ethereal tool i.e tcpdump, wireshark in the network.

Refer this link to understand the compatibility

Improve this answer
2
  • And what does that link say?
    – SDsolar
    Sep 7, 2017 at 2:56
  • The link describes about the compatibility between host and server authentication.
    – ifexploit
    Sep 8, 2017 at 11:19

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.