Question: what is the difference between ntlm and windows authentication?
Answer: If you enable Windows authentication, Kerberos will normally be preferred and if that is not available it will fall back to NTLM. NTLM only requires the client to communicate with the web server in order to authenticate. The web server handles the communication with the domain controller.