I look forward to seeing you all at #MC2MCConnect on Thursday, February 6th! Learn about IAKERB and LocalKDC! #Community #Windows #Server #Azure #MVPBuzz #VeeamVanguard
February 3, 2025 at 9:15 AM
I look forward to seeing you all at #MC2MCConnect on Thursday, February 6th! Learn about IAKERB and LocalKDC! #Community #Windows #Server #Azure #MVPBuzz #VeeamVanguard
#MSXFAQ LocalKdc und IAKerb www.msxfaq.de/windows/kerb... - Noch funktioniert IAKerb und LocalKdc nicht aber wenn es denn mal geht, dann kommen wir der NTLM-Abschaltung einen großen Schritt näher. Auch für Computer ohne AD und Clients ohne Verbindung zum KDC.
February 22, 2026 at 11:16 PM
#MSXFAQ LocalKdc und IAKerb www.msxfaq.de/windows/kerb... - Noch funktioniert IAKerb und LocalKdc nicht aber wenn es denn mal geht, dann kommen wir der NTLM-Abschaltung einen großen Schritt näher. Auch für Computer ohne AD und Clients ohne Verbindung zum KDC.
✨ IAKerb e LocalKDC su Windows: meno dipendenza da NTLM, più Kerberos
Leggi il blog: spcnet.it/iakerb-e-loc...
Leggi il blog: spcnet.it/iakerb-e-loc...
June 13, 2026 at 9:33 AM
✨ IAKerb e LocalKDC su Windows: meno dipendenza da NTLM, più Kerberos
Leggi il blog: spcnet.it/iakerb-e-loc...
Leggi il blog: spcnet.it/iakerb-e-loc...
Microsoft schränkt NTLM in Windows weiter ein. Ab Juni lösen IAKerb und LocalKDC das alte Authentifizierungsverfahren ab. #Microsoft #Windows
Windows-Sicherheit: Microsoft schränkt NTLM-Nutzung stark ein
winfuture.de
June 3, 2026 at 7:17 PM
Microsoft schränkt NTLM in Windows weiter ein. Ab Juni lösen IAKerb und LocalKDC das alte Authentifizierungsverfahren ab. #Microsoft #Windows
Finally, updated LocalKDC and IAKerb demo. It is the same demo we had for FOSDEM talk but updated to use unqualified username for the final test against a remote system.
[Video] Original post on mastodon.social
mastodon.social
March 13, 2025 at 2:40 PM
Finally, updated LocalKDC and IAKerb demo. It is the same demo we had for FOSDEM talk but updated to use unqualified username for the final test against a remote system.
I have the privilege of presenting at #ExpertsLiveNetherlands 2025 on CISO's delight: SMB over QUIC meets IAKERB & LocalKDC in Windows Server 2025 ==> www.expertslive.nl/sessies25 Join me and find out all the capabilities this brings for modern filesharing #MVPBuzz #SMBoverQUIC
Sessies 2025 | Experts Live Netherlands
www.expertslive.nl
May 3, 2025 at 3:15 PM
I have the privilege of presenting at #ExpertsLiveNetherlands 2025 on CISO's delight: SMB over QUIC meets IAKERB & LocalKDC in Windows Server 2025 ==> www.expertslive.nl/sessies25 Join me and find out all the capabilities this brings for modern filesharing #MVPBuzz #SMBoverQUIC
I find it useful for testing purposes especially on the acceptor side if you can’t actually run as that user. I originally required it for the LocalKDC work a few months ago as the KDC principals weren’t linked to a Windows user so I needed a keytab for the acceptor to use.
April 11, 2025 at 7:43 PM
I find it useful for testing purposes especially on the acceptor side if you can’t actually run as that user. I originally required it for the LocalKDC work a few months ago as the KDC principals weren’t linked to a Windows user so I needed a keytab for the acceptor to use.
Microsoft is finally pulling the plug on NTLM.
#ActiveDirectory #Kerberos #WindowsServer #Security
https://mustafaerbay.com.tr/en/blog/technology/ntlm-kapaniyor-once-fallbackin-nedenini-bulun/
#ActiveDirectory #Kerberos #WindowsServer #Security
https://mustafaerbay.com.tr/en/blog/technology/ntlm-kapaniyor-once-fallbackin-nedenini-bulun/
NTLM Is Being Switched Off: Find the Fallback Reason First
Microsoft is turning NTLM off by default in three phases. Before the blocking GPO: the reason codes in event 4020, NTLMv1's October 2026 threshold, and what IAKerb and LocalKDC do and don't solve.
mustafaerbay.com.tr
September 11, 2026 at 7:06 AM
Microsoft is finally pulling the plug on NTLM.
#ActiveDirectory #Kerberos #WindowsServer #Security
https://mustafaerbay.com.tr/en/blog/technology/ntlm-kapaniyor-once-fallbackin-nedenini-bulun/
#ActiveDirectory #Kerberos #WindowsServer #Security
https://mustafaerbay.com.tr/en/blog/technology/ntlm-kapaniyor-once-fallbackin-nedenini-bulun/
🔥 Fin de NTLM : IAKerb et LocalKDC arrivent en préversion sur Windows
Ma publication par ici :
- www.it-connect.fr/fin-de-ntlm-...
#Build2026 #Microsoft #cybersecurite
Ma publication par ici :
- www.it-connect.fr/fin-de-ntlm-...
#Build2026 #Microsoft #cybersecurite
June 3, 2026 at 5:46 AM
🔥 Fin de NTLM : IAKerb et LocalKDC arrivent en préversion sur Windows
Ma publication par ici :
- www.it-connect.fr/fin-de-ntlm-...
#Build2026 #Microsoft #cybersecurite
Ma publication par ici :
- www.it-connect.fr/fin-de-ntlm-...
#Build2026 #Microsoft #cybersecurite
Testing HTML5 RDP client. With NTLM off, site opens but RemoteApp fails internally. Would syfuhs.net/kdc-proxy-fo... help? Should I deploy KDC-proxy on RDS Gateway, or will IAKerb/LocalKDC solve this (make NTLM exception for now)? Not sure about external users.
KDC Proxy for Remote Access
There's a little known feature in Windows called the KDC Proxy that lets clients communicate with KDC servers over an HTTPS channel instead of TCP.
syfuhs.net
November 2, 2025 at 4:09 AM
Testing HTML5 RDP client. With NTLM off, site opens but RemoteApp fails internally. Would syfuhs.net/kdc-proxy-fo... help? Should I deploy KDC-proxy on RDS Gateway, or will IAKerb/LocalKDC solve this (make NTLM exception for now)? Not sure about external users.
Microsoft Reducing #NTLM Dependency: #IAKerb and #LocalKDC in #Windows11 #WindowsInsiders Preview
www.elevenforum.com/t/reducing-n...
www.elevenforum.com/t/reducing-n...
Reducing NTLM Dependency: IAKerb and LocalKDC in Windows Insider Preview
Windows IT Pro Blog:
Today, Windows expands where Kerberos works—reducing the need for NT LAN Manager (NTLM) fallback with IAKerb and LocalKDC, coming to client and server public preview later this mo...
www.elevenforum.com
June 2, 2026 at 4:45 PM
Microsoft Reducing #NTLM Dependency: #IAKerb and #LocalKDC in #Windows11 #WindowsInsiders Preview
www.elevenforum.com/t/reducing-n...
www.elevenforum.com/t/reducing-n...
#yesterdayatwork:
- together with @cryptomilk we've got #localkdc to handle IP addresses associated with the host as aliases for Kerberos authentication. You'd be able to do SMB3 with Kerberos using IP address and still use Kerberos auth. This is work in progress.
- keep discussing with […]
- together with @cryptomilk we've got #localkdc to handle IP addresses associated with the host as aliases for Kerberos authentication. You'd be able to do SMB3 with Kerberos using IP address and still use Kerberos auth. This is work in progress.
- keep discussing with […]
Original post on mastodon.social
mastodon.social
May 12, 2025 at 12:47 PM
#yesterdayatwork:
- together with @cryptomilk we've got #localkdc to handle IP addresses associated with the host as aliases for Kerberos authentication. You'd be able to do SMB3 with Kerberos using IP address and still use Kerberos auth. This is work in progress.
- keep discussing with […]
- together with @cryptomilk we've got #localkdc to handle IP addresses associated with the host as aliases for Kerberos authentication. You'd be able to do SMB3 with Kerberos using IP address and still use Kerberos auth. This is work in progress.
- keep discussing with […]
...
- migrated freeipa-local-tests to F42 as well and updated localkdc demo to changes in kirmes and samba.
- working on demos for Red Hat Summit's Community Central stage.
- migrated freeipa-local-tests to F42 as well and updated localkdc demo to changes in kirmes and samba.
- working on demos for Red Hat Summit's Community Central stage.
May 7, 2025 at 12:26 PM
...
- migrated freeipa-local-tests to F42 as well and updated localkdc demo to changes in kirmes and samba.
- working on demos for Red Hat Summit's Community Central stage.
- migrated freeipa-local-tests to F42 as well and updated localkdc demo to changes in kirmes and samba.
- working on demos for Red Hat Summit's Community Central stage.
#yesterdayatwork:
- meetings, meetings
- first cut of 32-bit ID ranges support in #freeipa. Next step is to actually test a switch over procedure and write docs
- talked to @SteveSyfuhs on how we can get early interop with Windows version of localkdc/iakerb. Hopefully, something will come […]
- meetings, meetings
- first cut of 32-bit ID ranges support in #freeipa. Next step is to actually test a switch over procedure and write docs
- talked to @SteveSyfuhs on how we can get early interop with Windows version of localkdc/iakerb. Hopefully, something will come […]
Original post on mastodon.social
mastodon.social
March 4, 2025 at 9:54 AM
#yesterdayatwork:
- meetings, meetings
- first cut of 32-bit ID ranges support in #freeipa. Next step is to actually test a switch over procedure and write docs
- talked to @SteveSyfuhs on how we can get early interop with Windows version of localkdc/iakerb. Hopefully, something will come […]
- meetings, meetings
- first cut of 32-bit ID ranges support in #freeipa. Next step is to actually test a switch over procedure and write docs
- talked to @SteveSyfuhs on how we can get early interop with Windows version of localkdc/iakerb. Hopefully, something will come […]
Fin de NTLM : IAKerb et LocalKDC arrivent en préversion sur Windows
www.it-connect.fr/fin-de-ntlm-...
www.it-connect.fr/fin-de-ntlm-...
Fin de NTLM : IAKerb et LocalKDC arrivent en préversion sur Windows
Lors de l'événement Build 2026, Microsoft a annoncé l'arrivée en préversion de deux composants destinés à éliminer NTLM sur Windows : IAKerb et LocalKDC.
www.it-connect.fr
June 2, 2026 at 8:46 PM
Fin de NTLM : IAKerb et LocalKDC arrivent en préversion sur Windows
www.it-connect.fr/fin-de-ntlm-...
www.it-connect.fr/fin-de-ntlm-...
NTLMも長かったなぁ。
（2026-06）「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表 - 窓の杜
https://forest.watch.impress.co.jp/docs/news/2115339.html
（2026-06）「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表 - 窓の杜
https://forest.watch.impress.co.jp/docs/news/2115339.html
「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表／「IAKerb」「LocalKDC」が今月にもCanaryチャネルでパブリックプレビュー
米Microsoftは6月2日（現地時間）、Kerberos認証のサポート機能「IAKerb」と「LocalKDC」のパブリックプレビューを今月後半にも開始すると発表した。「Windows Insider Program」のCanaryチャネルで、クライアント・サーバーともに展開される。
forest.watch.impress.co.jp
June 8, 2026 at 4:12 PM
NTLMも長かったなぁ。
（2026-06）「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表 - 窓の杜
https://forest.watch.impress.co.jp/docs/news/2115339.html
（2026-06）「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表 - 窓の杜
https://forest.watch.impress.co.jp/docs/news/2115339.html
1 week ago, I had the honor of presenting at #ExpertsLiveNL on #SMB over #QUIC. I enjoyed discussing the various use cases people had for their production implementations. I will present at #ExpertsLive Austria next week on this subject & #IaKerb #LocalKDC #MVPBuzz #Community.
June 10, 2025 at 9:28 AM
1 week ago, I had the honor of presenting at #ExpertsLiveNL on #SMB over #QUIC. I enjoyed discussing the various use cases people had for their production implementations. I will present at #ExpertsLive Austria next week on this subject & #IaKerb #LocalKDC #MVPBuzz #Community.
Want to learn about #SMB over hashtag#QUIC? Did you know about #Mutual h#Authentication and other enhancements? What does #IaKerb and #LocalKDC mean for security? Join my session at #ExpertsLiveNetherlands to learn more! lnkd.in/efe5u4DM #MVPBuzz #VeeamVanguard #Community
May 30, 2025 at 1:02 PM
Want to learn about #SMB over hashtag#QUIC? Did you know about #Mutual h#Authentication and other enhancements? What does #IaKerb and #LocalKDC mean for security? Join my session at #ExpertsLiveNetherlands to learn more! lnkd.in/efe5u4DM #MVPBuzz #VeeamVanguard #Community
"Reducing NTLM Dependency: IAKerb and LocalKDC in Windows Insider Preview" buff.ly/dl0hrjZ #Microsoft #techcommunity
Reducing NTLM Dependency: IAKerb and LocalKDC in Windows Insider Preview
Windows expands Kerberos authentication to more scenarios with IAKerb and LocalKDC
buff.ly
June 2, 2026 at 5:03 PM
"Reducing NTLM Dependency: IAKerb and LocalKDC in Windows Insider Preview" buff.ly/dl0hrjZ #Microsoft #techcommunity
記事を書きました：
「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表／「IAKerb」「LocalKDC」が今月にもCanaryチャネルでパブリックプレビュー
https://forest.watch.impress.co.jp/docs/news/2115339.html
「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表／「IAKerb」「LocalKDC」が今月にもCanaryチャネルでパブリックプレビュー
https://forest.watch.impress.co.jp/docs/news/2115339.html
「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表／「IAKerb」「LocalKDC」が今月にもCanaryチャネルでパブリックプレビュー
米Microsoftは6月2日（現地時間）、Kerberos認証のサポート機能「IAKerb」と「LocalKDC」のパブリックプレビューを今月後半にも開始すると発表した。「Windows Insider Program」のCanaryチャネルで、クライアント・サーバーともに展開される。
forest.watch.impress.co.jp
June 8, 2026 at 7:55 AM
記事を書きました：
「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表／「IAKerb」「LocalKDC」が今月にもCanaryチャネルでパブリックプレビュー
https://forest.watch.impress.co.jp/docs/news/2115339.html
「NTLM」の廃止、「Kerberos」への移行は第2フェイズへ ～Microsoftが発表／「IAKerb」「LocalKDC」が今月にもCanaryチャネルでパブリックプレビュー
https://forest.watch.impress.co.jp/docs/news/2115339.html