![]() Is there a way to use "Send NTLMv2 response only. Under Security Options there are policies that allow exceptions to specific servers regarding this rules, but setting mikrotik router under exceptions didn't allow me to login when "Send NTLMv2 response only. Once I reduced this to "Send NTLMv2 response only" I could normally logon to mikrotik using radius.Ī brief summary is that MS-CHAPv2 needs NTLMv1. Refuse LM & NTLM", located under Local Security Policy -> Local Policies -> Security Options, the server was rejecting requests. To be more precise, when "Network security: LAN Manager authentication level" option is set to "Send NTLMv2 response only. It turned out that I was facing the same issue and it's also documented on microsoft pages:Īs NTLMv1 was disabled the server was rejecting MS-CHAPv2 requests. Search for solution of ID 4625 took me to following forum thread: One with event ID 4625 and another with event ID 6273. One thing that lead me to look in another direction were Security logs. Sunny and Gary thank you for the time and suggestions, but I have found the root cause of this issue. ![]()
0 Comments
Leave a Reply. |
Details
AuthorWrite something about yourself. No need to be fancy, just an overview. ArchivesCategories |