4

How can I know whether my SharePoint 2010 Web Application is using NTLM or Kerberos authentication?

2 Answers 2

4

Download Fiddler and Run it. Fire up your IE and open the SharePoint site in the browser. Now go back to Fiddler and see the traces. Click on the trace with a HTTP Response headers pane in the left. If Kerberos is working "Cookies / Login" will show Authorization:Negotiate.

A detailed walkthrough is here

This ofcourse goes with the assumption, that you do not have access to the Central Admin.

Incase you have access to the Central Admin, Open the CA in browser. Click Manage Web applications > Select your web application > Authentication Provider (Ribbon option) > Click on Default(Zone Name) > IIS Authentication Settings.

3
  • Thanks a lot for the answer. What if I have access to the central admin?
    – Jake
    Aug 13, 2013 at 1:43
  • I have updated my answer based on your comment.
    – ArkoD
    Aug 13, 2013 at 8:23
  • The detail walkthrough link is broken. Is it switched to this one?
    – Mark L
    Aug 23, 2016 at 2:37
1

If you have access to your IIS server that is another option and much simpler than inspecting HTTP traffic: Simply view the site Authentication module config for Windows Authentication.

  1. In IIS Manager
  2. Select your site
  3. Click on the Authentication module
  4. Select Windows Authentication
  5. Select Providers...

For other options see https://serverfault.com/questions/423161/how-can-i-check-if-my-iis-site-is-using-ntlm-or-kerberos

IIS Manager > Site > Authentication module > Providers

1
  • In the providers list you can have multiple providers. For instance Negotiate at first and NTLM at second. If Negotiate (Kerberos) is not setup properly IIS will fail over to NTLM. If it is the case we have to figure out by fiddler or DOS command like klist.
    – Mark L
    Aug 23, 2016 at 2:36

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge you have read our privacy policy.

Not the answer you're looking for? Browse other questions tagged or ask your own question.