thousands of NTLM requests per day

Andrew Schulman
Tue Feb 28 15:17:00 GMT 2017

I got a call from our domain admins, asking me if I knew why my Windows 7
host would be sending many thousands of NTLMv1 authentication requests per
day. I don't know, and we're still trying to find out which application is
doing that, but here's what I wonder:

Could Cygwin be responsible for the authentication requests? I wonder about
this because Cygwin now queries Windows for user and group information that
used to be kept statically in /etc/passwd and /etc/group.

I don't know much about this. Sorry if it's an obtuse question. Any general
information would be appreciated.


Problem reports:
Unsubscribe info:

More information about the Cygwin mailing list