🛡️ Security

Extended Protection for Authentication

A Windows security feature that binds an authentication token to the TLS channel it was issued on, so a token replayed on a different channel is rejected. It is the primary defense against NTLM relay.

📚 Deep Dive

Learn Article

How to Enable Extended Protection for Authentication on Exchange

Extended Protection for Authentication is the control that stops NTLM relay against Windows services. Here is what it does and how to turn it on across Exchange virtual directories.

intermediate 3 min read

Back to Glossary