TL;DR: Server 2025 silently kills classic LDAPS NTLMv1 strip-MIC relays via EPA/channel-binding; modern relay paths must work around these defaults.

Stub — to be filled in.

What it is

TODO

Preconditions / where it applies

TODO

Technique

TODO

Detection and defence

TODO

References

• https://decoder.cloud/2026/02/25/what-windows-server-2025-quietly-did-to-your-ntlm-relay/