Silverfort researchers revealed a bypass for Microsoft’s Active Directory Group Policy disabling NTLMv1, exploiting a misconfigured Netlogon Remote Protocol setting. Despite policy restrictions, applications can re-enable NTLMv1, risking relay attacks. More https://www.silverfort.com/blog/ntlmv1-bypass-in-active-directory-technical-deep-dive/
