What is the tool that disables LM/NTLMv1, and where can I get it?

Due to security flaws that can allow unauthorized access to restricted resources, UITS has disabled support for the LAN Manager (LM) and NT LAN Manager Version 1 (NTLMv1) authentication protocols. Since certain network resources, such as printing to Residential Technology Center (RTC) printers or mapping network drives, depend on network authentication, you need to run a tool UITS created to configure your Windows 2000 and higher computers to disable insecure LM and NTLMv1 authentication protocols. You can obtain this tool free of charge from IUware. For more information, see LM, NTLM, and NTLMv2 on the IU network.

• Download the IU NTLMv2 Windows Authentication Update.
• You must run the IUWindowsAuthUpdate tool as an administrator. Either log in temporarily as a local administrator, or run the tool using the Secondary Logon service.

Note: If your Windows computer is joined to Indiana University's ADS domain, you do not need to run this tool. To see if your computer is joined to the ADS domain:

Windows 7 or Vista

• Right-click Computer, located on your desktop or in your Start menu, and select Properties.
• On the next screen, under "Computer name, domain, and workgroup settings", look for "Domain:". If you see "ads.iu.edu", your computer is joined to the ADS domain. If not, you may need to run the tool.
• If you see "Workgroup" instead of "Domain:", you may also need to run the tool.

Windows XP

• Right-click the My Computer icon, located on your desktop or in your Start menu, and choose Properties.
• Click the Computer Name tab, and look for the "Domain:" field. If you see "ads.iu.edu", your computer is joined to the ADS domain. If not, you may need to run the tool.
• If you see "Workgroup" instead of "Domain:", you may also need to run the tool.

Comments/Questions/Corrections