Would you like to learn how to configure the NTLM authentication on the IIS server? In this tutorial, we are going to configure the NTLM authentication on the IIS server.

• Windows 2012 R2
• Windows 2016
• Windows 2019

In our example, the IIS server is hosting the website WWW.GAMEKING.TIPS.

In our example, the IIS server name is TECH-DC01.

The NTLM authentication is now called WINDOWS authentication.

Equipment list

The following section presents the list of equipment used to create this tutorial.

As an Amazon Associate, I earn from qualifying purchases.

Tutorial IIS - NTLM authentication

On the server manager, enable the IIS security feature named: Windows Authentication.

IIS - NTLM authentication feature

Start the application named: IIS Manager.

Start IIS Windows

On the IIS Manager application, access your website and select the directory that you want to protect.

On the right part of the screen, access the option named: Authentication.

IIS - Configure Authentication

Disable the Anonymous authentication on the selected directory.

IIS - Disable the anonymous authentication

Enable the Windows authentication on the selected directory.

IIS - Enable NTLM authentication

Optionally, use the command-line to enable the NTLM authentication.

Copy to Clipboard

In our example, we configured the IIS server to use the NTLM type of authentication.

In our example, we configured the IIS server to require authentication to access a directory.

As an administrator, create a local user account.

Copy to Clipboard

In our example, we created a local user account named GOHAN.

To test the installation, open the Chrome browser and try to access the protected directory.

In our example, the following URL was entered in the Browser:

• http://www.gameking.tips/protected

The IIS server will require you to perform the user authentication.

IIS - Basic authentication configuration

Congratulations! You configured the NTLM authentication on the IIS server.

Tutorial IIS - NTLM Single Sign-On Authentication

To enable the NTLM transparent authentication, you need to create an SPN entry for your website.

As a domain administrator, create an SPN entry for your website.

Copy to Clipboard

Change the website and server name.

Congratulations! You configured the NTLM authentication without an authentication form on the IIS server.