|
|
|
|
Re: User performed NTLM authentication in NT domain, this domain is not valid [message #42605 is a reply to message #41011] |
Thu, 22 February 2007 22:19   |
pbwells
Messages: 4 Registered: July 2006 Location: North Canton
|
|
|
|
Question for you, I have two people on the network that have installed Office 2007, both of them are generating these errors; User * performed NTLM authentication in NT domain PARKMAIL, this domain is not valid,
Per Kevin's suggestion I checked the domains section and found nothing in the NT Domains line, Do you know how to get Outlook to stop trying the NTLM authentication? I've also refered my boss to Microsofts tech support for additional assistance, but I figured it couldn't hurt to ask here as well.
|
|
|
|
Re: User performed NTLM authentication in NT domain, this domain is not valid [message #42607 is a reply to message #42606] |
Thu, 22 February 2007 23:04   |
pbwells
Messages: 4 Registered: July 2006 Location: North Canton
|
|
|
|
just a quick note;
Kerio, you might want to begin working on a cure for this, I say cure rather than fix because from what I've found on MS Outlook 2007 support site, Outlook uses NTLM authentication by default if you save your authentication credentials in your profile, if you enter them by hand every time you initiate a Outlook session it will use basic authentication and we "shouldn't" see the NTLM error messages. I have yet to test this. I will play with it more tomorrow and post my findings.
|
|
|
Re: User performed NTLM authentication in NT domain, this domain is not valid [message #42616 is a reply to message #40987] |
Fri, 23 February 2007 14:03   |
pbwells
Messages: 4 Registered: July 2006 Location: North Canton
|
|
|
|
This from MS Support:
RESOLUTION
Basic authentication
If you want to use Basic authentication, you must continue to type your user account credentials. There is no way for the client to submit your user name and password automatically. If you want to log on automatically, you must configure your Outlook profile to use NLTM authentication.
My organization has 400+ pc's and I'd conservatively say that +90% of those use Outlook. As the business grows etc, Office 2007 is replacing 2003, We haven't yet stopped ordering 2003 but we are ordering more and more copies of 2007. Especially as we upgrade VP level users. The boss only recently said to me that more and more Exchange is looking like a good idea for integration sake.
- I can't see a bunch of VP types that have a hard enough time remembering their passwords remembering to click "send & receive" every 5 min plus typing in their user name and password every time because Outlook doesn't play nice with Kerio.
|
|
|
Re: User performed NTLM authentication in NT domain, this domain is not valid [message #42617 is a reply to message #42616] |
Fri, 23 February 2007 14:20   |
 |
Pavel Dobry (Kerio)
Messages: 2057 Registered: October 2003 Location: Czech Republic
|
|
|
|
I think some things needs a clarification. First, you don't have to enter username/password in Outlook when sending every email. The password is stored in the Outlook account and is entered only once when the account is created. Of course, Outlook will ask the user for new password if it was changed on the server.
Second, there is an option in Outlook called SPA (Secure Password Authentication). This type of authentication use NTLM and does not need to know username/password because it takes it from the user currently logged to the Windows workstation.
KMS supports NTLM in Windows domain. Following requirements must be fulfilled:
* KMS must run on Windows
* Outlook must run on Windows computer added to the Windows domain
* User must be logged to Windows domain
* KMS must be properly configured: user account is authenticated against NT domain or Kerberos, Windows NT domain in Domain Settings must contain correct NT Windows domain name
According to the error message, the user is trying to login to some NT domain but KMS is not configured properly. I would suggest to enable Authentication module in the debug log and open a ticket on our technical support.
Knowledge Base: http://manuals.gfi.com/en/kerio/home/Content/Home.htm.
[Updated on: Fri, 23 February 2007 14:21] Report message to a moderator
|
|
|
|
|