✎ [V7] ISSUE: LAN manager authentication level must be 3 or higher (cannot create MS Exchange mail level backup) [Ahsay Wiki]

This page is read only. You can view the source, but not change it. Ask your administrator if you think this is wrong.
===== [V7]  ISSUE: LAN manager authentication level must be 3 or higher (cannot create MS Exchange mail level backup)  =====

<html>
 <b>
  Article ID:
 </b>
 5342
 <br/>
 <b>
  Reviewed:
 </b>
 2018-05-24
 <br/>
 <br/>
 <b>
  Product Version:
 </b>
 <br/>
 AhsayOBM: 7.3.0.0 to 7.x 
 <br/>
 OS: Windows
</html>


<html>
<FONT COLOR=red SIZE=+1>
<B>ATTENTION</B>
1st January, 2022: v7 officially End-of-Life [<A HREF=https://wiki.ahsay.com/doku.php?id=public:announcement:ahsay_v7_eol>details</A>]
</FONT>
</html>

===== Problem Description =====
<html>
When creating a MS Exchange Mail Level Backup Set, the following error message is displayed:
<br>
<br>
<i>LAN Manager authentication level must be 3 or higher.</i>
<br>
<br>
<img style="width:75%; border:thin solid black" src="http://wiki.ahsay.com/lib/exe/fetch.php?media=public:lan_manager_lv_3.PNG"/>
</html>


===== Cause =====
<html>
The error message suggested that for the domain which the Exchange server reside, the Network security: LAN Manager authentication level policy setting must be set to level 3 or higher (Registry security level), which is one of the following:
<br>
<ul>
<li><font color=black>Send NTLMv2 response only</li>
<li><font color=black>Send NTLMv2 response only. Refuse LM</li>
<li><font color=black>Send NTLMv2 response only. Refuse LM & NTLM</li></ul>
Reference: <a href="https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level">https://docs.microsoft.com/en-us/windows/security/threat-protection/security-policy-settings/network-security-lan-manager-authentication-level</a>
</html>


===== Resolution =====
<html>
To resolve the issue, please refer to the following steps:
<br>
   <ul>
    <li>
     <font color=black>Open <b>Local Security Policy</b> from <b>Administrative Tools</b>.</font>
     <br/>
     <br/>
    </li>
    <li>
     <font color=black>Under <b>Security Settings</b>, expand <b>Local Policies</b>, <b>Security Options</b>, <b>Network security: LAN Manager authentication level</b>.</font>
     <br/>
     <br/>
    </li>
    <li>
     <font color=black>Ensure that the setting is configured to use NTLMv2, for example:</font>
     <br/>
     <br/>
     <ul>
      <li>
       <font color=black>Send NTLMv2 response only</font>
      </li>
      <li>
       <font color=black>Send NTLMv2 response only. Refuse LM</font>
      </li>
      <li>
       <font color=black>Send NTLMv2 response only. Refuse LM &amp; NTLM</font>
      </li>
     </ul>
     <br/>
     <div style="display: block">
      <dl>
       <dt style="display: block">
        <img style="border:thin solid black" src="http://wiki.ahsay.com/lib/exe/fetch.php?media=public:5011_0.png"/>
       </dt>
      </dl>
     </div>
     </font>
    </li>
   </ul>
</html>


===== Keywords =====
lan, manager, obm, ahsayobm, exch, exchange, msexchange, auth, authentication
User Tools

Site Tools

Page Tools
