Active directory hashing algorithm in Server 2008 R2 ...

Hello,

I have some questions about Active directory hashing algorithm .

Which encryption method is using when Active Directory stores users's password in ntds.dit in Windows Server 2008 R2 ?
LM is disable in Default Domain Policy so apparently, NTLM is using but which version (NTLMv1 or v2) ?

Is there any GPO setting to change hash algorithm of Active Directory or in ADSI ?

Does the Active Directory supports SHA128/256 ?

Thanks you for your help,

Best Regards,