Skip to main content

Documentation Index

Fetch the complete documentation index at: https://docs.specterops.io/llms.txt

Use this file to discover all available pages before exploring further.

​
Summary

Within SCCM’s client push installation properties, there exists a setting to “Allow connection fallback to NTLM” (Figure 1).
Client Push Installation Properties
In SCCM versions prior to 2207, there exists a bug such that without this setting enabled, the connection will fallback to NTLM regardless of the setting. Microsoft patched this bug in KB15599094. This patch is applied by default to new site installations of version 2207+. This patch only applies to versions 2103+. If the installed version is older, Microsoft recommends updating to a current version.

​
Linked Defensive IDs

​
Associated Offensive IDs

​
References