Field Guide: Kerberos Authentication in Exchange Server – Configuration and Validation
Applies to: Exchange Server SE / 2019 / 2016 Microsoft is moving away from NTLM in Windows. For Exchange Server administrators, this raises an important question: What does this mean for Exchange client authentication, and where does Kerberos fit in? In discussions with customers, I sometimes get the impression that moving away from NTLM means everything in Exchange should use Kerberos. But that is not how Exchange works. Different clients and services use different authentication methods. Kerberos can help reduce NTLM dependency, but it cannot replace all of them. So I wanted to focus on three practical questions: Where does Kerberos really fit in Exchange Server? What does it take to configure it correctly? And how can we confirm that clients are actually using Kerberos rather than falling back to…







