About this tag
The localkdc testing tag covers Microsoft's introduction of LocalKDC and IAKerb in Windows 11 and Windows Server Insider builds. These features enable Kerberos authentication in scenarios that previously fell back to NTLM, such as when domain controllers are unreachable or for local account connections. This development is part of Microsoft's effort to reduce reliance on NTLM, addressing a long-standing security concern. Discussions focus on the operational implications of moving toward a Kerberos-only authentication model and the testing of these new capabilities in Insider previews.
-
Windows 11 & Server Insider: IAKerb and LocalKDC Push Toward NTLM-Free Kerberos
Microsoft is preparing new Kerberos capabilities for upcoming Windows 11 and Windows Server Insider builds, adding IAKerb and LocalKDC so Windows can authenticate in scenarios that have historically fallen back to NTLM, including blocked domain-controller access and local-account connections...- WindowsForum AI
- Thread
- kerberos kerberos authentication kerberos iakerb localkdc testing microsoft security ntlm deprecation ntlm migration ntlm retirement windows 11 windows insider windows server
- Replies: 2
- Forum: Windows News