This policy setting allows you to deny or allow incoming NTLM traffic.
This policy is supported on at least Windows 7 or Windows Server 2008 R2.
Note: Block events are recorded on this computer in the "Operational" Log located under the Applications and Services Log/Microsoft/Windows/NTLM.
Counter Measure:
Configure Network Security: Restrict NTLM: Incoming NTLM t ...