hello we have a windows 2003 standard in a WORKGROUP mode (not domain member) running FTP services. recently we had a security scan that flagged this server as using NTLMv1 and was told we should have this server use NTLMv2 only. This server only has FTP services installed. It also have part of IIS installed as required by the FTP services but it does not have the authentication options that are present when the full IIS is installed. I cannot seem to find a way to force NTLMv2 use only for a server in WORKGROUP (not domain member) mode. again, this is a standalone FTP server in WORKGROUP mode and NOT a member of a domain. any suggestions? thanks in advance!

To enable NTLMv2 on your Windows Server 2003 server, refer to this article. If you proceed like it is mentioned, your server will refuse the use of LM and NTLM. If you have IIS questions, thanks to post them in the Official Microsoft IIS site. This posting is provided "AS IS" with no warranties or guarantees , and confers no rights. Microsoft Student Partner Microsoft Certified Professional Microsoft Certified Systems Administrator: Security Microsoft Certified Systems Engineer: Security Microsoft Certified Technology Specialist: Windows Server 2008 Active Directory, Configuration Microsoft Certified Technology Specialist: Windows Server 2008 Network Infrastructure, Configuration

thank you! i believe that should solve this issue, assuming our FTP clients don't go belly up now!