This is exactly the point i was trying to make and why i opened my comment with "default configuration environment". I'm also not going to respond to a non-ex

This is exactly the point i was trying to make and why i opened my comment with "default configuration environment". I'm also not going to respond to a non-expert's plea for information with unnecessary minutiae like the differences between LM, NT, and NTLM hashes or the differences between NTLMv1/v2 and NetNTLM. My ommissions were intentional because i'm trying to make my comment approachable. In a default, non-hardened Windows environment, NTLM is a nightmare. Yes, it can be secured. No, it is not straightforward.