KB: Windows Integrated API (WinAPI) and Kerberos Authentication

With the Windows Integrated API in Passwordstate, it is the interaction between Internet Information Services (IIS) and Active Directory which dictates which protocol is used for communication.

If you wish to force the use of Kerberos authenication, and not use NTLM, you must remove the NTLM Provider in IIS, and just leave Kerberos - as per the screenshot below.