Question: why use ntlm instead of kerberos?
Answer: If for any reason Kerberos fails, NTLM will be used instead. NTLM has a challenge/response mechanism. 1 - A user accesses a client computer and provides a domain name, user name, and a password. ... It compares the encrypted challenge with the response by the client (in step 4).