Hi,
When replaying the script that requires NTLM authentication, you may notice several "HTTP 401 - Unauthorized Access" messages in the execution log before the authentication goes through. This is a normal behavior. NTLM uses a 4-way handshaking challenge/response mechanism for authentication. Additional information is availbale in the following KM http://support.openview.hp.com/selfsolve/document/KM184757
Kind regards,