title: Can a web service provide NTLM authentication against a domain without being a domain member?
body: <p>Can a web service provide NTLM authentication against a domain without being a domain member?</p>
  
  <p>What I have is a simple Nancy web service that is self-hosted via Owin to support NTLM authentication (inspired by a <a href="https://gist.github.com/damianh/10086352" rel="nofollow noreferrer">gist from Damian Hickey</a>, <a href="https://stackoverflow.com/a/26164276/1811525">slightly modified</a>). This works very well as long as the service runs on a machine that has joined the relevant domain.</p>
  
  <p>Now I am looking for a way to authenticate the client via NTLM when the service is running on a machine which is <strong>not a member</strong> of any Windows domain (which I think is what is called <em>pass-through authentication</em> in this <a href="https://msdn.microsoft.com/en-us/library/ms973911.aspx" rel="nofollow noreferrer">SSPI tutorial</a>).</p>
  
  <p>After reading many articles regarding NTLM and SSPI, I am still not sure if this scenario is possible at all.</p>