Cryptolocker - SMB 1 - Scan to share

Does anybody have some (reasonable & practical) advice on this?

 

We use some fairly recent Kyocera MFD's however when I removed SMB 1 from the server nobody could scan to shared folders...

 

Is there a way to do this without SMB 1?

That's weird because our Kyoceras still work okay and they are ancient, I wonder if that's because the server is pending a reboot.

Maybe scan to ftp or scan to email maybe ? Do they new kyoceras have any SMB settings ? Ours just have smb ntlmv1 / v2

I have had the same issue with ricoh printers. Swapped from smb to ftp worked a treat. I am using synology boxes for shares.

Can't offer anything in terms of the Kyocera stuff specifically (we don't have any), but I have a similar issue with some Linux servers that now aren't mounting shares on a Windows 2008 R2 server where SMBv1 has just been disabled. Curiously, two of the Linux servers have identical OS and CIFs/SMB versions installed: one is happy to use SMBv2 and the other won't play ball. Restarts of the Windows and Linux servers haven't had an affect.

 

Googling the problem all morning has lead to various suggestions: trying different authentication options (NTLM, etc.), resetting the password of the user account being used and using IP addresses instead of hostnames when specifying the share location might be things to explore.

As the Ricoh Photocopiers here only have V1 of SMB, I switched them to using scan and send via e-mail.

Does anybody have some (reasonable & practical) advice on this?

 

We use some fairly recent Kyocera MFD's however when I removed SMB 1 from the server nobody could scan to shared folders...

 

Is there a way to do this without SMB 1?

 

I'm sure I have seen somewhere someone say they got a firmware update it that fixed it. Speak to your support company?

Are you scanning to a NAS box? Some older NAS devices only support SMB v1.

Switched to scan to email here. Had a vast mish mash of Kyoceras and Ricohs so I wasn't going to entertain testing them all then arguing with the leasing company. Edited May 16, 2017 by Geoff

Talking to Konica Minotaur about this. The new c306 models are OK but the older bizhub c284/554 aren't happy. They have updated the firmware and fiddled with options but no joy so far. Hope KM and other copier companies can sort this out pronto. No sane IT depth. wants to keep using SMB1 just for a scanner.

Our new HP mfp277 is also fine so it looks like older kit is the problem . Oh yeah buffalo NAS also not working at the moment but QNAP is fine.

We have the same issues on Ricoh's - old and new ones! Our support company have been speaking to Ricoh who said that firmware won't fix it (yet). Switching to scan to email for now but they must do something soon surely?

Does anyone have any instructions for Scan to Mail for Konica's? We are using Office 365.

Does anyone have any instructions for Scan to Mail for Konica's? We are using Office 365.

Follow this guide from Konica:

https://www.biz.konicaminolta.com/download/users-guide/754e_654e/en/contents/id08-_101308320.html

 

The Office365 settings are:

smtp.offce365.com

port 587

TLS enabled.

 

You'll have to create a mailbox for your photocopiers to use. This works but you have to change the password every 60 days (or whatever you've got it set to) so it can become a pain depending how many photocopiers you have. Alternatively, you can allow the photocopiers to send email directly. There's a guide to how to set it up here: https://support.office.com/en-gb/article/How-to-set-up-a-multifunction-device-or-application-to-send-email-using-Office-365-69f58e99-c550-4274-ad18-c805d654b4c4

Spoken to our supplier today and apparently the Kyocera models we have (TASKalfa 5550ci & TASKalfa 5500i) can not use SMB v2.0...

 

There is a small RICOH Aficio MP C305, in the finance office that alledgedly uses the highest version it can, so if v1.0 is disabled it will try higher versions. So everybody is just going to have to use that (luckily we are a small school).

 

I am about to uninstall SMB v1.0 from the server so we will see.

 

Thinking about it, is this all I have to do? I am seeing various other threads with weird and wonderful Powershell scripts, but I thought it would just be a case of going into Server Manager and uninstalling the role... Do I have to enable v2.0 or something?

Script is moreso for removing it enmasse, just click remove roles and features and uncheck the box , you can do it via powershell to supress the reboot, but ideally I think it really needs that reboot or it's still enabled

Great! I uninstalled SMB v1 and voila nobody can scan to a network share....

 

Hopefully there is a firmware upgrade!

 

One thing though, I spoke to our suppliers technical support and he asked if I'd 'ENABLED' SMB v2....

 

Is that right? DO I have to enable it?

It's dead on our several Konica Minolta C654e and 758. I've requested a firmware update (who knows if it'll work), for now I've got a C654e scanning to one of our defunct NASs as it'll talk to that. No-one else can get to the scans of course, but I can manually move them at least.