APM Negotiate Kerberos Only
I have a simple APM policy starting with 401 Response configured for basic + negotiation, followed with a Kerberos Auth. When a domain member connects with IE, the Integrated Windows Authentication works great and does automatic authentication without prompting the user for logon. The problem is for non domain Windows systems using IE or Firefox. They are immediately presented with a logon window, but every time tries NTLM, which fails. Is there a way to force non domain members to BASIC instead?
