It's important to understand that, by default, Windows cannot just generate NTLMv1 traffic. The use of NTLMv1 versus NTLMv2 isn't negotiated. Instead, the client decides which one to send based on the ...