Jorge's Quest For Knowledge!

All You Need To Know About Identity And Security On-Premises And In The Cloud. It's Just Like An Addiction, The More You Have, The More You Want To Have!

(2014-01-18) Tracking NTLM Authentication Delays And Failures In Both Windows Server 2008 SP2 And Windows Server 2008 R2

Posted by Jorge on 2014-01-18


After installing a hotfix (see KBs below) you will be able to track NTLM authentication delays and failures in both Windows Server 2008 SP2 and Windows Server 2008 R2.

SYMPTOMS

Consider the following scenario:

  • You have one or more forests that have multiple domains
  • There are combinations of users and resources (such as applications or proxy servers) in different domains
  • There are lots of NTLM logon requests from remote domain users to a resource server that is running either Windows Server 2008 Service Pack 2 (SP2) or Windows Server 2008 R2.

In this scenario, the NTLM requests time out. For example, Exchange clients do not authenticate to the Exchange server when this issue occurs. Therefore, users cannot access their mailboxes, and Microsoft Outlook seems to stop responding.

CAUSE

This issue occurs because the NTLM API throttling limit is reached

MORE DETAILED INFORMATION

For more detailed information see the corresponding KB articles:

Cheers,
Jorge
———————————————————————————————
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always evaluate/test yourself before using/implementing this!
* DISCLAIMER:
https://jorgequestforknowledge.wordpress.com/disclaimer/
———————————————————————————————
############### Jorge’s Quest For Knowledge #############
#########
http://JorgeQuestForKnowledge.wordpress.com/ ########
———————————————————————————————

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out / Change )

Twitter picture

You are commenting using your Twitter account. Log Out / Change )

Facebook photo

You are commenting using your Facebook account. Log Out / Change )

Google+ photo

You are commenting using your Google+ account. Log Out / Change )

Connecting to %s

 
%d bloggers like this: