API Server returning multiple HTTP status codes? NTLM's expected behavior?

Question

I am working support for API platform today and received an interesting issue from a user building their own API service.

A user has a server they are building with N