I have just finished migration domain from Winnt 4.0 to windows 2003 Active Directory. We are in mixed mode since I still have some Winnt 4.0 BDC. I have Winnt, 2000, and XP as client computers in the domain. My question is how do I know if the clients are using kerberos or NTLM to autheticate. I assume all windows 2000 and XP client are using kerberos and Nt is using NTLM. Is there a utility that that I can run on the client to tell me how they were authenticated.

thanks
PEter

Your assumptions are probably right. To see what your clients are using, you
could enable success and failure auditing of account logon events. Careful,
this will generate volumes of data if you have more than a few clients.

Thanks ~ JH


"Peter" <anonymous@discussions.microsoft.com> wrote in message
news:EB0E5CC4-4A1E-4A93-AEA2-995711BA1EB1@microsoft.com...
BDC. I have Winnt, 2000, and XP as client computers in the domain. My
question is how do I know if the clients are using kerberos or NTLM to
autheticate. I assume all windows 2000 and XP client are using kerberos and
Nt is using NTLM. Is there a utility that that I can run on the client to
tell me how they were authenticated.