Team Foundation Server 2017 and Kerberos Authentication

TFS 2017 updates the default security support provider for Windows Authentication from NTLM to Negotiate. This change aligns with SDL recommendations to prioritize Kerberos over NTLM due to NTLM vulnerabilities. The Negotiate provider attempts Kerberos first and falls back to NTLM. This change aims to enhance security by enabling Kerberos for machine accounts without user intervention, while ensuring compatibility for existing deployments. The explicit selection of security support providers has been removed to simplify configuration.