Active Directory and NTLM Authentication

Question

Im writing an IIS Application, which manages AD users. For this purpose Ive configured site to use Negitiate AuthenticationProvider, and everything works. I wonder, is NTLM suitable for operations with Active Directory (such as creating user accounts)? Or AD accepts only Kerberos authentication?

Answer 1

NTLM should work fine, Kerberos is the latest technology n it is recommended to use Kerberos. From WIN2K onwards Kerberos is the default authentication mechanism use by Microsoft for AD.