ntlm authentication is not dead nor are its problems

hanging out at tec this week, a recurring theme came up more than once. it's this thing called maxconcurrentapi. here's some relevant links:

http://blogs.technet.com/b/askds/archive/2011/09/15/is-this-horse-dead-yet-ntlm-bottlenecks-and-the-rpc-runtime.aspx

http://support.microsoft.com/default.aspx?scid=kb;EN-US;928576