In fact, the fall release of Windows 10 disables SMB v1 by default ( Opens a new window). Unless your copiers won't support newer editions of the protocol, I would advise you to eliminate it. Current consensus seems to be forming around the position that there is no good reason to leave SMB v1 active on your network. In fact, the main difference between SMB v1 and subsequent versions is improved underlying security. The patch I linked above closes up one security hole in the SMB v1 protocol but, as I read more on the topic, it turns out there are many SMB v1 vulns (and many patches). Click your version of Windows in the left hand column to get to the appropriate patch download page. Why wasn't this patch applied before this past week? I regularly check for updates for Windows and apply and restart as needed. Why is this only hitting 4 of the 10 Windows 10 Pro PCs in the office? Maybe I've been up too long, but I didn't find anything that seemed to be a patch for this problem on the referenced Microsoft page.ĭoes the patch simply turn off SMB 1.0 or does it fix the vulnerability? If it fixes the vulnerability, why turn off SMB 1.0? I will contact the bizhub copier maintenance people and ask them if they can turn on SMB 2.0 and stop SMB 1.0 on this copier/scanner. If you can't use SMB 2.0 or later on your Konica and elect to re-enable SMB v1.0, be sure to also apply the patch appropriate SMB 1.0 patch.įind the patch(es) here: Opens a new window. SMB is now disabled by default because of a critical (remote code execution) vulnerability discovered last March (2017).
This way I was able to remove SMBv1 from all PCs, tighten security a notch and still get their scanning done with the old Konica Minolta.
I then added a shortcut on each person's desktop to their personal scan folder on the FTP server.
UPDATE: In order to not leave the PCs on the network vulnerable to SMBv1 attacks, I went back and set up Filezilla FTP Server on their file server, created a folder for each person in the office on the FTP server and set up scanning to the FTP server from the bizhub C224e. Be aware that the firmware for the Bizhub C224e that turns on SMB 2 only will not scan to Macs.
The long term fix is to get a copier tech out to set up SMB 2 (requires new firmware apparently only available to copier technicians) and to enable SMB 2.0 on all PCs. Instructions on enabling and disabling SMB v1, v2 and v3 can be found here Opens a new window. Although the safety of this is questionable, it will get your scan to folder working again with your Windows PCs. The "fix" to the original problem of this thread is to turn on SMB 1.0 in your Updated Windows PCs.
0 kommentar(er)
