You can secure the default configuration of your Azure Active Directory Domain Services (AD DS) managed domain in the following ways:
- Disable NTLM v1 support on the managed domain.
- Disable the synchronization of NTLM password hashes from your on-premises Active Directory instance.
- Disable TLS v1 on the managed domain.
For more information, see the documentation.