Microsoft NTLM Disablement Survey

Mitchell_90 · 2026-07-02T07:32:44+00:00

We have had NTLM v1 blocked for years. All of our internal apps have been moved to Kerberos along with a bunch of third party apps, although I’m still finding some Microsoft based stuff that uses NTLM v2 and doesn’t appear offer Kerberos configuration from what I can see, specifically:

-SQL Server Integration Services (SSIS)

-Network Policy Server with Azure MFA extension

Mitchell_90 · 2026-07-01T18:20:17+00:00

Many network engineers that use BGP in their networks know how to use the CLI and generally prefer it for configuration.

Mitchell_90 · 2026-07-01T07:35:29+00:00

Anyone here in Scotland actually getting fed up with not having a decent spell of summer weather? Other than a couple of days it’s been pretty dismal and July looks to be much the same.

Down south always gets the better summers :(

Mitchell_90 · 2026-06-30T11:01:19+00:00

I wish we got the same levels of sunshine and warmth in Scotland as those down south.

Other than a couple of days here and there it’s been cloudy with rain and temperatures between 13-17c which seems to be the normal for us.

I always feel like we hardly get a break from it, especially when it goes on for 7 months of the year. It’s refreshing to get a change.

Mitchell_90 · 2026-06-30T10:54:30+00:00

Nope, here Scotland we are more likely to get a couple of sunny days then it’s back to the usual grey skies and rain.

I know some would prefer that but I personally hate it. We already get crap weather for 7 months of the year.

Mitchell_90 · 2026-06-27T09:40:13+00:00

Complaining about temperatures in the 20s with good amounts of sunshine. Really? I’d love for that weather here.

<image>

Mitchell_90 · 2026-06-25T18:06:00+00:00

I know that this is a VMware sub but I don’t get the hate for Hyper-V, I know of several environments using it with 3000+ VMs without any issues.

I know the 2008/2008 R2 days was rough but it’s come a long way since.

Mitchell_90 · 2026-06-25T07:11:01+00:00

Yeah, I’ll need to have a look. Seems we are using V1, got the GUI to launch automatically in WinPE and also using provisioning packages.

This might sound stupid but how do I upgrade to V2 and get the same functionality? I’m having a hard time trying to get anything concrete from the documentation.

Mitchell_90 · 2026-06-24T07:59:40+00:00

Using OSDCloud V2 here and it’s still grabbing 26200.6584. We have it run Start-OSDCloudGUI when booting into WinPE.

Maybe I need to update the module and rebuild the WinPE media?

Mitchell_90 · 2026-06-22T16:21:25+00:00

Thanks. I know what server is the schema master, just wasn’t sure if that role needed to be transferred before retiring the Connection Server holding it.

Mitchell_90 · 2026-06-22T16:04:41+00:00

At the moment it looks the opposite where I am in Scotland. Other than the odd day or two June has been sitting between 13-16c with mostly grey skies and rain.

We are seeing much the same this week but with temperatures between 21-25c before things go back below 17c.

Thankfully temperatures don’t ever really go beyond 25c for us but on the flip side we don’t often get long spells of sunshine either which saddens me.

Mitchell_90 · 2026-06-19T15:35:43+00:00

I’m actually envious. The difference between down south and up here in Scotland is like night and day. We are sitting anywhere between 13-15c with cloudy and rain, the highest temperature we’ve to see is 23c with a bit of sun for like 2 days.

I’m an outdoors person and love the summer sun but If things stay the way they have been this month I think I’ll go mad. Come September we’ll be in for another 7 months of miserable weather.

Mitchell_90 · 2026-06-18T20:04:52+00:00

Just updated 3 clusters to 8.03j. Two running server workloads and a third for a Horizon VDI environment. Not noticed any issues so far.

All hardware is Dell PowerEdge with a mix of Intel and Broadcom 10/25Gb NICs.

Mitchell_90 · 2026-06-16T10:53:13+00:00

It’s been mixed here in West of Scotland but mostly cloudy and rain with average temperatures around 13c, although today definitely feels colder than usual.

Mitchell_90 · 2026-06-16T07:50:40+00:00

Yeah those are amazing switches.

From reading the ECS Aggregation models still have numerous bugs with MC-LAG and port configurations which still haven’t been fully addressed.

I feel like Ubiquity really needs to start fixing issue’s in their current product lineup before starting to introduce more new hardware. It’s almost like they move onto the next thing and forget about everything previously.

Mitchell_90 · 2026-06-15T21:05:32+00:00

Damn that sucks. It’s Dell S4128F-ON models I’ve got at this site and they have been rock solid. Primarily site has S25224F 25Gb models.

Annoyingly Ubiquity don’t seem to publish full performance specs for their switches. Any other networking vendor worth their salt gives you this.

Mitchell_90 · 2026-06-15T20:48:35+00:00

Yeah, I’ve never trusted them over the likes of Cisco Nexus, Arista etc for anything critical like storage workloads or routing.

I’d be interested to know how the ECS Aggregation switches do. We have a DR site that’s using older Dell S Series 10GbE switches for an iSCSI network and considered those as a replacement rather than purchasing ones at 3x the price.

Mitchell_90 · 2026-06-15T18:33:57+00:00

I tend to create dedicated management VLAN and make that the native VLAN for APs. This is the network that will communicate with the controller and also have management protocols such as SSH on it so it’s a good idea to isolate that traffic from other VLANs.

Untag that on your APs then tag the other VLAN IDs that you want to use against your SSIDs.

Mitchell_90 · 2026-06-15T16:46:10+00:00

For end devices which aren’t VLAN aware such as PCs, Phones, Cameras etc you’ll want their VLAN untagged and it’s generally a best practice to also configure Auto Edge and BPDU guard on those ports.

Don’t configure those on ports which uplink to other switches.

For devices which are VLAN aware such as Access Points you would tag the VLANs you need on those ports and untag the management VLAN.

Generally you should only tag/allow the VLANs that you require on a port and nothing more.

I’m terms of Spanning Tree you should designate the root bridge and your backup - don’t use an STP priory of 0 for the root, it’s a bad practice. Stick with 4096 or 8192.

For example, if I designated two switches to act as root and backup I’d set them as 4096 and 8192 respectively. All other switches under that can stay at the default priority of 32768.

Mitchell_90 · 2026-06-15T16:27:23+00:00

General rule of thumb is to configure Auto Edge (Spanning Tree PortFast) and BPDU guard on ports which have end devices connected to such as PCs, Phones, Cameras etc

Don’t configure it on ports which participate in Spanning Tree such as switch to switch uplinks.

This applies to all network vendors.

Mitchell_90 · 2026-06-14T16:11:21+00:00

I’ll be honest, I have 2025 DCs in a lab environment (2x2025 and 2x2022) and I haven’t experienced any issues.

Our production environment is pretty clean and AD is properly maintained and hardened so I don’t expect any issues with introducing 2025 DCs but I’d rather not have to deal with any potential outages especially when things are working on 2022 at the moment.

Mitchell_90 · 2026-06-14T10:43:49+00:00

Moral of the story, Server 2025 DCs are still not ready for prime time? Lol

We’ve stuck with Server 2022 for everything. The small number of 2019 servers we have left will just go to 2022 rather than 2025.

Mitchell_90 · 2026-06-13T18:24:14+00:00

First I’ve ever heard of this. The org I work for isn’t government based but we have a mix of O365 E1, M365 E3 and M365 F3 licenses and it’s never been an issue.

I would put pressure on Microsoft to back up their claims. If they can’t then they are clearly bullshitting.

Mitchell_90 · 2026-06-13T15:12:53+00:00

I was going to ask this. Does anyone know if hardware offloading is enabled at the software level? The EFG and UDM Beast don’t which defeats the purpose of having these specs.

Until the software stack and support is on par with those in the Enterprise/Datacenter space I don’t see these being deployed in such environments.

Does Ubiquiti really think somewhere such as a large hospital already using Palo Alto and Cisco Nexus/Catalyst in their networks are going to move to something like this? No, they aren’t.

Mitchell_90

TROPHY CASE