Service News Category: Microsoft Infrastructure

  • Turning off NTLMv1 on the NETID domain controllers

    August 11, 2014

    A high-impact service change is planned for the UWWI NETID domain service. We will send an email tomorrow after this change is complete.   What and When: On Tuesday, August 12 (8/12/2014) at 10am we plan to turn off NTLMv1 support on the NETID domain controllers.   What you need to do: On 8/1/2013, we made this change and rolled it back because of a large unexpected impact. We’ve done a lot of work to help everyone be ready this…

  • RE: Turning off NTLMv1 on the NETID domain controllers

    July 30, 2014

    Hi folks,   I thought I’d depart from our usual format on this change reminder.   The ‘NTLMv1 is turned off’ change is happening in 13 days. We’ve been sending user notifications based on a really small slice of all the possible sources of NTLMv1 logons. Based on that really small slice of the overall picture, usage is down, but we don’t have a comprehensive picture of what the impact will be. Put simply, the NTLMv1 logon events are logged…

  • 2014 July

    July 16, 2014

    Here’s our semi-annual newsletter update on recent happenings with the UW Windows Infrastructure.   ==== New Capabilities and Improvements ====   * Group Managed Service Accounts are available to Delegated OU customers. This provides a self-service, higher-security option for non-interactive applications, services, and scheduled tasks that run automatically but need a security credential. See http://www.netid.washington.edu/documentation/groupManagedServiceAccounts.aspx.   * Kerberos delegation sensitivity enforced. Protections for certain types of UW NetIDs from applications that use this “logon on behalf of” capability. You can…

  • NETID DC Demotions, Upgrades, and Promotions

    July 9, 2014

    Several changes are planned for the NETID domain service.   What and When: The week of July 21, 2014 (7/21/2014), each NETID domain controller will be demoted, upgraded to Windows Server 2012 R2, then promoted. Only one domain controller will be affected any given day.   7/21: bane.netid.washington.edu 7/22: vader.netid.washington.edu 7/23: maul.netid.washington.edu 7/24: sidious.netid.washington.edu 7/25: tyranus.netid.washington.edu   What you need to do: If you’ve hard-coded specific domain controller names in applications or code, you will need to adjust that configuration,…

  • RE: Turning off NTLMv1 on the NETID domain controllers

    July 8, 2014

    This is an update for the high-impact service change.   The date for this change has been moved.   What and When: On Tuesday, August 12 (8/12/2014) at 10am we plan to turn off NTLMv1 support on the NETID domain controllers.   More Info: We have moved the change date back to give customers operating web servers that rely on Windows Integrated authentication and the NETID domain more time to make changes to address the non-Windows browser issues we’ve noted…

  • RE: Turning off NTLMv1 on the NETID domain controllers

    July 1, 2014

    This is an update for the high-impact service change in 2 weeks.   More Info: NTLMv1 use is significantly down in the server log files available to the UWWI service team. Last week’s logs suggest that as many as 75% of the misconfigured computers we were seeing a month ago have now been fixed. The UWWI service does not have access to your log files. Only you can check whether your users will be affected. See the original announcement below…

  • RE: Turning off NTLMv1 on the NETID domain controllers

    June 24, 2014

    This is an update for the high-impact service change in 3 weeks.   More Info: We’ve updated the known problems/workarounds documentation with what we think is a substantial addition. For non-Windows clients interacting with a web server leveraging Windows Integrated authentication, we are aware of only one browser that supports NTLMv2: Safari on MacOS. It’s possible there are other options, but we are unaware of them. Aside from using Safari, an alternative workaround for a non-Windows client would be to…

  • RE: Turning off NTLMv1 on the NETID domain controllers

    June 6, 2014

    This is an update for this high-impact service change.   A date for the change has been set:   What and When: On July 16 at 10am we plan to turn off NTLMv1 support on the NETID domain controllers.   More Info: Because NTLMv1 use persists in large numbers, over the next couple weeks we will be directly contacting users which our logs show still are using NTLMv1. If you are their local IT support, they may contact you for…

  • UWWI User Name Changes (UWWI Person Directory Agent release)

    May 21, 2014

    A service change is planned for the UWWI NETID domain service. You may see variations of this notice from other services that are dependent on UWWI for directory information, e.g. perhaps a notice from UW Exchange about the impact on the global address list.   What and When: On Thursday, May 29th, we’ll release a new version of our UWWI Person Directory Agent. This will result in quite a few changes to the naming attributes on UWWI user objects. The…

  • Turning off NTLMv1 on the NETID domain controllers

    April 22, 2014

    A high-impact service change is planned for the UWWI NETID domain service. This notification will be sent to a variety of mailing lists to broadly increase awareness.   What and When: This summer we plan to turn off NTLMv1 support on the NETID domain controllers. We have not yet set a date for this change because of the amount of proactive mitigation still needed. Later in Spring quarter, we expect to set a specific date for the summer.   Why:…