Technical Tip: How to configure Windows to use transparent NTLM authentication

[bkrempel]

Description	This article describes how to configure transparent authentication via NTLM on Windows (without a pop-up).
Scope	FortiGate, Windows, FSSO.
Solution	When using FSSO for authentication in FortiGate, it is possible to use NTLM for backup authentication. Normally, NTLM requests username and password through a pop-up in the browser, but it is also possible for this authentication to be transparent, without the username and password pop-up being requested. In the Windows start menu, search for 'Internet Options' or run the command 'inetcpl.cpl': In the Security tab, select Custom Level: Under Security Settings -> User Authentication, select the option 'Automatic logon with current username and password': After enabling this option, restart the workstation. When the user logs into Windows using the domain username mapped by FSSO, backup authentication via NTLM will occur transparently.