Skip navigation

How do I enable plain text passwords with the telnet server in Windows 2000?

A. Windows 2000 uses NTLM to encrypt passwords sent from telnet for security reasons but not all telnet clients are compatible so its possible to configure the telnet service to not require NTLM as follows:

E:\&gt;<b>tlntadmn</b><br><br>
Microsoft (R) Windows 2000 (TM) (Build 2194)<br>
Telnet Server Admin (Build 5.00.99201.1)<br><br>
Select one of the following options:<br><br>
0) Quit this application<br>
1) List the current users<br>
2) Terminate a user session ...<br>
3) Display / change registry settings ...<br>
4) Start the service<br>
5) Stop the service<br><br>
Type an option number \[0 - 5\] to select that option: <b> 3</b><br><br>
Select one of the following options:<br><br>
0) Exit this menu<br>
1) AllowTrustedDomain<br>
2) AltKeyMapping<br>
3) DefaultDomain<br>
4) DefaultShell<br>
5) LoginScript<br>
6) MaxFailedLogins<br>
7) NTLM<br>
8) TelnetPort<br>
Type an option number \[0 - 8\] to select that option: <b> 7</b><br>
Current value of NTLM = 2<br>
Do you want to change this value ? \[y/n\]<b>y</b><br>
NTLM \[ current value = 2; acceptable values 0, 1 or 2 \] :<b>1</b><br>
Are you sure you want to set NTLM to : 1 ? \[y/n\]<b>y</b><br><br>
setting will take effect only when Telnet Service is re-started<br><br>
Select one of the following options:<br><br>
0) Exit this menu<br>
1) AllowTrustedDomain<br>
2) AltKeyMapping<br>
3) DefaultDomain<br>
4) DefaultShell<br>
5) LoginScript<br>
6) MaxFailedLogins<br>
7) NTLM<br>
8) TelnetPort<br>
Type an option number \[0 - 8\] to select that option: <b> 0</b><br><br>
Select one of the following options:<br><br>
0) Quit this application<br>
1) List the current users<br>
2) Terminate a user session ...<br>
3) Display / change registry settings ...<br>
4) Start the service<br>
5) Stop the service<br><br>
Type an option number \[0 - 5\] to select that option: <b> 0</b><br><br>
E:\&gt;<b>net stop tlntsvr</b><br>
The Telnet service is stopping.<br>
The Telnet service was stopped successfully.<br><br>
E:\&gt;<b>net start tlntsvr</b><br>
The Telnet service is starting..<br>
The Telnet service was started successfully.

Now the telnet service will not require NTLM authentication. You can also directly set registry value HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\TelnetServer\1.0\NTLM to 1 for the same change.


TAGS: Security
Hide comments

Comments

  • Allowed HTML tags: <em> <strong> <blockquote> <br> <p>

Plain text

  • No HTML tags allowed.
  • Web page addresses and e-mail addresses turn into links automatically.
  • Lines and paragraphs break automatically.
Publish