Enable SMBV1 Windows 10

[keyboards]

Hi

 

We've got a really old ready nas here and it won't work on windows 10 unless you enable this. how do we do this en-masse

 

[3s-gtech]

Don't do this lightly! Due to the implications of keeping it enabled, we disabled it and ditched four old NASs, and spent time updating the firmware/OS on the others to make them work with SMBv2. You can push this out en-mass using GP, and the instructions for doing this are widely published by MS (on phone so hard to link). Edited October 12, 2018 by 3s-gtech
Clarity

[LeMarchand]

I think you can do it via Powershell.

 

Enable-WindowsOptionalFeature -Online -FeatureName smb1protocol

 

That said, you'd be better off with a NAS that doesn't use SMB1. If money is tight can you upgrade the OS? If not, what about buying a box and some disks (or reuse the existing ones if possible) and build your own NAS? If you don't have spare licenses, I'm pretty sure FreeNAS does SMB3, though I've only used it on a backup device rather than a "constantly in use by multiple users" type one.

[keyboards]

I'm against it tbh but we'll have people shouting and screaming, we've copied all the legal content onto a team drive.

 

IT's a 2007 model, it's pretty much meant for XP and think updates ceased quite a while ago

 

As said above. I don't see a need for it, all the non copyright material ie photos and videos of trips is on a team drive they have access to

Edited October 12, 2018 by keyboards

[LeMarchand]

I'm against it tbh but we'll have people shouting and screaming, we've copied all the legal content onto a team drive.

 

IT's a 2007 model, it's pretty much meant for XP and think updates ceased quite a while ago

 

As said above. I don't see a need for it, all the non copyright material ie photos and videos of trips is on a team drive they have access to

 

If it's that critical, surely they can find the money to replace? I'm sure you could dig up some horror stories of networks that were destroyed due to the SMB1 vulnerabilities, or just suggest that leaving SMB1 open makes it much more likely that someone could get in and find the stash of stuff that doesn't sound as if it should be on the network anyway...

[pete]

Backup content, convert to an iSCSI volume mounted on another server, recreate share, restore files?

 

I also concur with the "kill it with fire/replace it" comments.

Edited October 12, 2018 by pete
spelling

[synaesthesia]

Agreed as above. "Sorry, we are not compromising the security of the network for convenience" if you really can't replace it or use alternative means. Is it a Bufallo perchance?

[southhamster]

An 11 year old NAS?

I'm surprised it's even SATA III.

Maybe it could "accidentally" fail.

If it's that old probably loads of security fixes missing too.

I agree.

Iscsi or scrap!

[keyboards]

It's a

[TABLE=width: 70%, align: left]

[TR]

[TD]

[/TD]

[TD=colspan: 1] ReadyNAS Duo V1

[/TD]

[/TR]

[/TABLE]

[3s-gtech]

We have a ReadyNAS (Pro) Duo. I modified the SMB configuration on the embedded OS, and it now talk to our clients. Wasn't hard, and I'm awful with Linux. https://community.netgear.com/t5/Legacy-NETGEAR-and-Partners-Add/ReadyNAS-Duo-Sparc-needs-SMBv2-or-higher/td-p/1497238 Oh, and AD integration broke. Completely! This NAS just sits as an NFS target which I can access with a local account so it doesn't matter, but this will impact you I think. Time to replace :| Edited October 12, 2018 by 3s-gtech

[LeMarchand]

Edit: Beaten to it by the source!

 

Edugeek and @3s-gtech to the rescue?

 

I managed to enable SMBv2 on my very old ReadyNAS Pro Duo by using SSH. Netgear provided some excellent instructions on doing this, if that's the problem you're having. With it done, I can still access my device even though v1 is completely off for clients and servers.

 

https://community.netgear.com/t5/Usi...y/td-p/1288567

 

http://www.edugeek.net/forums/windows-10/192473-windows-10-refusing-connect-netgear-readynas.html#post1644794

[3s-gtech]

Hell, according to that thread I threw away five NASs! I remember it being quite a costly change, but I now have a sweet, sweet Synology setup in a remote cupboard for backups. The Netgear lives on as my backup target for ESXi using ghettoVCB.