Microsoft plans to kill off NTLM authentication in Windows 11

It's in the article: (and the whole reason for finally killing off NTLM)

> However, Microsoft is now working on two new Kerberos features: IAKerb (Initial and Pass Through Authentication Using Kerberos) and Local KDC (Local Key Distribution Center).

> "The local KDC for Kerberos is built on top of the local machine's Security Account Manager so remote authentication of local user accounts can be done using Kerberos," Microsoft's Matthew Palko explained.

> "This leverages IAKerb to allow Windows to pass Kerberos messages between remote local machines without having to add support for other enterprise services like DNS, netlogon, or DCLocator. IAKerb also does not require us to open new ports on the remote machine to accept Kerberos messages."

I'm wondering about Sonos v1 systems. They require some ancient login protocol from the server (NTLM v1?) that breaks every year or two. Sonos will never update their system to modernize it. The dumbest thing is it's just read only access for effectively a public account.

Welcome to the new Windows virtual experience, where you can connect all of your Windows devices in a joined ecosystem, and here's the best part you no longer have to worry about paying the full price of a computer, instead you'll be able to pay a small monthly subscription to get a premium Windows Connected Computing Experience(TM). You'll be able to do all the things you normally do* at a fraction of the price of buying a full machine, and best of all if there are any issues the Microsoft Experience Team will ship you a new device absolutely free of charge.** Welcome to the Windows future where you get the experience you deserve.

* Noted not all activities are applicable to all people some activities may violate our terms of service and result in a closing of your account without these activites include but are not limited to, the production of tools or services that would result in loss of revenue for the Microsoft corporation, developing free or open source (FOSS) software without an authorized Microsoft FOSS developer license, publishing misinformation, false or libelous claims about the Microsoft corporation or products, and other activities as determined by Microsoft.

** Free in this case is exclusive of necessary fees, surcharges, and shipping and handeling related expenses.

Welcome to the Windows future where you get the experience you deserve.

P.S. Please don't create the torment nexus

Normal Kerberos. For SSO NTLM was a fallback with no SSO power only.

How will file and printer sharing work with computers that are only in a workgroup and not a domain?