Network security: Restrict NTLM: Audit Incoming NTLM Traffic This policy setting allows you to audit incoming NTLM traffic. ...

Network security: Restrict NTLM: Audit Incoming NTLM Traffic

This policy setting allows you to audit incoming NTLM traffic.

If you select "Disable", or do not configure this policy setting, the server will not log events for incoming NTLM traffic.

If you select "Enable auditing for domain accounts", the server will log events for NTLM pass-through authentication requests that would be blocked when the "Network Security: Restrict NTLM: Incoming NTLM traffic" policy setting is set to the "Deny all domain accounts" option.

If you select "Enable auditing for all accounts", the server will log events for all NTLM authentication requests that would be blocked when the "Network Security: Restrict NTLM: Incoming NTLM traffic" policy setting is set to the "Deny all accounts" option.

This policy is supported on at least Windows 7 or Windows Server 2008 R2.

Note: Audit events are recorded on this computer in the "Operational" Log located under the Applications and Services Log/Microsoft/Windows/NTLM.

Network security: Minimum session security for NTLM SSP based (including secure RPC) clients This security setting allows ... Network security: Minimum session security for NTLM SSP based (including secure RPC) servers This security setting allows ... Network security: Restrict NTLM: Add remote server exceptions for NTLM authentication This policy setting allows you to create ... Network security: Restrict NTLM: Add server exceptions in this domain This policy setting allows you to create an exception ... Network security: Restrict NTLM: Audit Incoming NTLM Traffic This policy setting allows you to audit incoming NTLM traffic. ... Network security: Restrict NTLM: Audit NTLM authentication in this domain This policy setting allows you to audit NTLM authentication ... Network security: Restrict NTLM: Incoming NTLM traffic This policy setting allows you to deny or allow incoming NTLM traffic. ... Network security: Restrict NTLM: NTLM authentication in this domain This policy setting allows you to deny or allow NTLM ... Network security: Restrict NTLM: Outgoing NTLM traffic to remote servers This policy setting allows you to deny or audit ...