For NTLM authentication to work in workgroups and untrusted domains, first you'll need to install the DPM agent on the computer that you want to protect, then you'll need to configure the agent to recognize the DPM server, and, lastly, you'll need to attach the protected computer to the DPM server.