How can we increase to Kerberos - what would be using NTLM?


Log Name: System
Source: LsaSrv
Date: 3/27/2020 12:03:44 AM
Event ID: 6038
Task Category: None
Level: Warning
Keywords: Classic
User: N/A
Computer: serverVM1.domain.local
Description:
Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server.

NTLM is a weaker authentication mechanism. Please check:

Which applications are using NTLM authentication?
Are there configuration issues preventing the use of stronger authentication such as Kerberos authentication?
If NTLM must be supported, is Extended Protection configured?

http://go.microsoft.com/fwlink/?LinkId=225699 .
Event Xml:



6038
0
3
0
0
0x80000000000000

9599610946


System
serverVM1.domain.local

---

see this post here: Microsoft Windows Server has detected that NTLM authentication is presently being used between clients and this server. This event occurs once per boot of the server on the first time a client uses NTLM with this server.