SMB is Dead, Long Live SMB!

Published Feb 26 2020 09:22 AM 24.1K Views
Microsoft

Hello again, James Kehr here with another guest post. Titles are hard to do. They must convey the topic to the reader while being both interesting and informative, all at the same time. Doing this with a technical article makes life even harder. Now imagine my dilemma when starting an article about SMB1 behaviors in modern Windows. Think about that for a minute. Go ahead. The article will still be here.

 

Today I'll explain why you still see a little SMB1 on your network even after you uninstalled SMB1 from Windows, and why it's a good thing. 

 

SMB1 is Dead!

The end of SMB version 1 (SMB1) topic has been discussed in great detail by Ned Pyle, who runs the SMB show here at Microsoft. Go read this article if you have not. 

 

At first glance this seems like I’m beating a dead horse. If that’s what you thought, you’d be right. Unfortunately, this figuratively dead horse needs to be beaten1 some more.

 

Please stop using SMB1. Please get rid of those ancient, legacy systems that only support SMB1. We constantly get cases from customers asking why modern Windows 10 doesn’t support SMB1 out-of-the-box so it will work with their old, insecure systems.

 

Let’s go over this one last time.

 

  • The only versions of Windows that require SMB1 are end-of-support (EOS). By years! These are Windows Server 2003 (EOS July 2015), Windows 2000 Server (EOS July 2010), their client editions, and older.
  • Samba and Linux distros like Ubuntu have retired SMB1 as well. If you have a Linux/Unix-like distro that only supports SMB1, it’s time to upgrade.
  • Not only does Microsoft not support these EOS operating systems (OS’s), we do not support interoperability with them. Meaning, if the latest version of Windows 10 does no work with an EOS version of Windows over SMB, Microsoft will not support you.

 

Why not? Let’s start by putting the age of Windows 2000 (W2000) and 2003 (W2003) into perspective.

 

  • EOS Windows versus Apple: 
    • Windows 2000 was released 7 years before the first iPhone.
    • Windows 2003/XP was released 4 years before the first iPhone.
    • Apple computers were still running IBM PowerPC processors.
    • Asking for EOS Windows support is like asking Apple to support PowerPC Macs. I’m sure Apple support would get a good laugh out of the request, but I imagine that’s as far as the request would go.

 

  • … vs Android
    • Didn’t even exist.

 

  • … vs Linux
    • Kernel 2.2.14 was released the same year as Windows 2000.
    • Version 2.4 was the newest kernel when Windows Server 2003 launched.
    • Support for the last version of the version 2 kernel, 2.6.32, ended in 2016.
    • How fast do you think the “no” would come back from Linux distro support if you asked for support on kernel 2.2 or 2.4? Assuming your distro of choice even existed back then.

By asking Microsoft to support EOS Windows, people are effectively asking us to support an OS that is so old that the modern smartphone didn’t even exist yet. Not counting Pocket PC or Windows Mobile here. An era when dial-up internet was still dominant and the world was still learning how high-speed Internet would impact computer security.

 

Multi-core processors didn’t exist yet, outside of the mainframe space. Those didn’t come around until 2004 (AMD) and 2005 (Intel). X86 64-bit processors didn’t exist when W2000 was released and they were brand new for W2003. Running legacy OS’s is not just bad security, it’s scary security because you are running an OS built for a completely different era of computing.

 

The real question here is: Why are you still running an OS or device that is so old it requires SMB1?

 

The SMB1 Problem

The biggest problem with SMB1 is that it was developed for the pre-Internet era. The first dialect came out in 1983 from IBM. Security and performance were designed for closed token ring networks and old fashion spinny disks. As EternalBlue and WannaCry would later prove, it is not a protocol that has aged well and it is no longer safe to use.

 

Unlike most other deprecated protocols, however, SMB1 controls the keys to the kingdom: data, services, file systems, accounts, and more. This makes SMB1 exploits critically harmful.

 

When Microsoft decided to retire SMB1 for real, and stop asking nicely, we tore off that band-aid by removing it completely from Windows 10 Spring 2017 Update (Win10 1703), when Windows detected that SMB1 was not in use. No SMB1 dialect was sent during negotiation, no SMB1 was allowed at all. And that broke things.

 

It turned out that some devices which only know about SMB1 weren’t quite sure what to do when getting an SMB request with no SMB1 in it. This caused a lot of strange behavior on the Windows-side; namely, hanging or pausing until everything finally timed out. This manifested in Windows as an unresponsive Windows Explorer (the technical name for the yellow folder icon you click on to access your files). People don’t like that. I don’t like that.

 

We ended up making changes to mitigate this without actually enabling SMB1.

 

  • Windows 10 1709 (2017 Fall Update) and newer will send SMB1 dialects as part of the SMB negotiate. We do this to help interoperability with legacy devices. I.E. prevent Windows Explorer from pausing/hanging.
  • We will not actually allow an SMB1 connection when SMB1 is disabled. We only pretend to. The connection will end up getting closed when the server or client tries to use an SMB1 dialect.

In addition to preventing uncomfortably long waits for Windows users, it lets us bubble up messages about SMB1 only devices on your network. System admins can look in the Event Viewer > Applications and Services Logs > Microsoft > Windows > SMBServer-Operational log for event ID 1001, which is created when SMB1 is used.

 

Log Name:      Microsoft-Windows-SMBServer/Operational

Source:        Microsoft-Windows-SMBServer

Date:          9/17/2019 12:17:41 PM

Event ID:      1001

Task Category: (1001)

Level:         Information

Keywords:      (8)

User:          N/A

Computer:      DC01

Description:

A client attempted to access the server using SMB1 and was rejected because SMB1 file sharing support is disabled or has been uninstalled.

 

Guidance:

An administrator has disabled or uninstalled server support for SMB1. Clients running Windows XP / Windows Server 2003 R2 and earlier will not be able to access this server. Clients running Windows Vista / Windows Server 2008 and later no longer require SMB1. To determine which clients are attempting to access this server using SMB1, use the Windows PowerShell cmdlet Set-SmbServerConfiguration to enable SMB1 access auditing.

 

SMB1 auditing can be also be enabled to get more details about what is using SMB1 on your network.

 

Set-SmbServerConfiguration -AuditSmb1Access $true

 

Log Name:      Microsoft-Windows-SMBServer/Audit

Source:        Microsoft-Windows-SMBServer

Date:          12/13/2019 11:37:53 AM

Event ID:      3000

Task Category: None

Level:         Information

Keywords:     

User:          N/A

Computer:      DC01.Contoso.com

Description:

SMB1 access

 

Client Address: 192.168.1.214

 

Guidance:

This event indicates that a client attempted to access the server using SMB1. To stop auditing SMB1 access, use the Windows PowerShell cmdlet Set-SmbServerConfiguration.

 

Negotiation

 

The SMB Negotiate command is where the SMB dialect is …well… negotiated.

 

The SMB Client – the system requesting access to the remote file system – sends a list of all the dialects it supports. A dialect is a revision of the SMB protocol specification. Every revision of the SMB protocol has, so far, gotten a new dialect. Though SMB 3.1.1 was built to be more extensible so it may be a while before the next dialect is created.

 

The SMB Server – the system hosting the file system – then selects the newest dialect that both client and server support. When the server supports none of the client protocols it aborts the connection with a TCP RST (reset).

 

How does faux SMB1 support work with Negotiate? Delicately.

 

Here’s what it looks like when a Windows SMB Server rejects an SMB1 only connection from an SMB Client. This is the SMB1 only request, as seen by Wireshark.

 

No.

Time

Source

Destination

Protocol

Length

Info

24

6.892775

192.168.1.214

192.168.1.215

SMB

191

Negotiate Protocol Request

SMB (Server Message Block Protocol)

    SMB Header

    Negotiate Protocol Request (0x72)

        Word Count (WCT): 0

        Byte Count (BCC): 98

        Requested Dialects

            Dialect: PC NETWORK PROGRAM 1.0   <<<<<< These are all the old SMB1 dialects

            Dialect: LANMAN1.0

            Dialect: Windows for Workgroups 3.1a

            Dialect: LM1.2X002

            Dialect: LANMAN2.1

            Dialect: NT LM 0.12

 

This is Windows saying “NOPE!” to SMB1 in the form of an immediate TCP reset. Get thee gone, SMB1!

 

25

6.893143

192.168.1.215

192.168.1.214

TCP

54

445 → 49769 [RST, ACK] Seq=1 Ack=138 Win=0 Len=0

 

Now let’s look at the Windows SMB1 discovery packet. In this test I have disabled SMB2 support on a Windows Server. The SMB Client is a standard Win10 1909 client.

 

No.

Time

Source

Destination

Protocol

Info

4

15:50:48.03

192.168.1.211

192.168.1.109

SMB

Negotiate Protocol Request

SMB (Server Message Block Protocol)

    SMB Header

    Negotiate Protocol Request (0x72)

        Word Count (WCT): 0

        Byte Count (BCC): 34

        Requested Dialects

            Dialect: NT LM 0.12

            Dialect: SMB 2.002

            Dialect: SMB 2.???

 

There are three Dialects listed in the Negotiate Protocol Request frame:

  • NT LM 0.12 – This is the final SMB1 dialect created, also known as the CIFS dialect.
  • SMB 2.002 – This is the first SMB2 dialect released with Windows Vista.
  • SMB 2.??? – This is the wildcard SMB2 dialect. Which I won’t go into here.

NT LM 0.12 (CIFS) is a red herring. This is the newer mechanism in Win10 to flush out SMB1 only devices. My test server, which only has SMB1 enabled, does what it’s supposed to do and tries to catch the red herring.

 

No.

Time

Source

Destination

Protocol

Info

5

15:50:48.04

192.168.1.109

192.168.1.211

SMB

Negotiate Protocol Response

SMB (Server Message Block Protocol)

    SMB Header

    Negotiate Protocol Response (0x72)

        Word Count (WCT): 17

        Selected Index: 0: NT LM 0.12  <<<<<<<< The server took the bait.

 

Can you guess what happens next? If you guessed that the Win10 SMB Client sent the SMB Server a big fat “NOPE!” in the form of a TCP RST, you would be correct.

 

No.

Time

Source

Destination

Protocol

Info

6

15:50:48.04

192.168.1.211

192.168.1.109

TCP

53994 → 445 [RST, ACK] Seq=74 Ack=132 Win=0 Len=0

 

 “Why not just fix SMB1?” you may ask. We did! It’s called SMB2.

 

Long Live SMB2

 

Devs and marketing teams like bigger version numbers. Devs because it allows them to track changes. Marketing teams because bigger numbers mean you have something new to sell. The number of changes made between SMB1 and SMB2 was staggering. The entire protocol was redesigned from the ground up. New commands, WAN optimizations galore, tightened security, more features…it was the stuff of marketer’s dreams.

 

Instead of adding yet another dialect to SMB, it was decided that a new major version of SMB was needed. This was a justified move given that the entire protocol spec was essentially rewritten. Only concepts from the original SMB and CIFS protocols were adopted. And thus, MS-SMB2 was born.

 

SMB2 has now become SMB3. This is more of a marketing move since SMB3 still uses the MS-SMB2 protocol spec. There were just enough changes between SMB 2.1 and SMB 3.0 to justify a new major version. On an interesting historical note, SMB3 was originally SMB 2.2 until the marketing team got involved.

 

Now, on top of the fancy protocol redesign, Microsoft has added several cool new features, and continues to do so. Things like SMB Encryption allows full AES encryption of data payloads to prevent man-in-the-middle (MITM) snooping and attacks. Continuous Availability provides seamless failover between clustered file servers. SMB Direct allows multiple hundreds of Gbps of throughput between RDMA capable servers while only sipping CPU cycles. The list goes on and new features are added all the time to adapt SMB to the ever-changing network landscape, like SMB over QUIC and SMB compression arriving in future builds of Windows. Or, now, if you’re reading this far enough in the future.

 

There really is no reason to keep SMB1 around anymore. Managers like to cite cost as the reason, but, when you think about the potential cost of a data breach, is it really worth the risk? Why would anyone want to keep around a system that can only use network protocols known to be exploitable and control the keys to the kingdom? Hopefully, the answer to these questions are, no and heck no.

 

SMB is dead, long live SMB!

 

1 – No animals were harmed during the creation of this article. Some electrons were deeply offended, but that’s about it.

 

19 Comments
Occasional Visitor

Sadly, as of last year there are still printers/scanners being made with smb v1 only .... and of course zero plans on updating any old models.

Microsoft

Please update the title of this post it is read as SMB is Dead. Also last sentence again: SMB is dead, long live SMB! 

am I wrong or it should be SMB1 is dead?

Thanks James! Awesome article

Microsoft

Hi @Carlos_Mayol, thanks!

 

The title is a play on an old British phrase: The King is dead, long live the King! King is replaced with Queen when the monarch involved is female, of course. It is used when the monarch passes to signify a change in monarch.

 

The first King/Queen is the one who has passed away. The second King/Queen is the new monarch. The actual name of the monarch is never mentioned. Using SMB1 and SMB2 in the title wouldn't fit the phrase correctly.

Microsoft

@Jeremy707, we have been working with printer vendors and the like to remove SMB1. Progress is being made on this front. Sometimes not as fast as we would like.

Occasional Visitor

@JamesKehr 

 

Hi,

 

Regarding SMB Event ID 3000 - I've seen conflicting information regarding whether the SMB1 attempt is successful or unsuccessful. Could you please clarify which is the case? The language is a little ambiguous. Thanks in advance.

Microsoft

Awfully glad to see this post, especially when my customer comes to me while auditing deprecated protocols and trying to find the culprit leaving Protocol type SMB in his traces / logs.  Should be another mystery successfully solved. :smile:

Microsoft

@NMFR1, it doesn't report whether it's successful or not. Only that an attempt was made. Look for event IDs 1001 in ..\SMB Server\Operational, and ..\SMB Server\Audit 3000, 3002, and 3003 (SMB1 uninstall event) for all the SMB1 events. If you enable analytic logging, the SMB Server analytic log event 1804 will tell you when no SMB1 was attempted in the past 20 minutes.

Occasional Visitor

Can anyone please share the list of features available in SMB v2?

 

Thanks in advance.

Microsoft

@AnjuAhlawat1691 this is a very long list. Primary among the changes are vastly improved security (SMB Encryption), performance (multi-credit operations, compression (coming soon(TM), SMB over RDMA, etc.), less chatty, more efficient over WAN's, Scale Out File Server, and much, much more.

 

These are some articles that cover the basics. Please note that features vary between OS versions and implementations (i.e. Samba, NetApp, etc. implement only a subset of the total features available, and older versions of Windows/Linux won't support the newest features).

 

What's New in SMB in Windows Server | Microsoft Docs

 

Overview of file sharing using the SMB 3 protocol in Windows Server | Microsoft Docs

 

New SMB file server 3.0 features - Windows Server | Microsoft Docs

 

 
Regular Visitor

MS screwed with millions of users, condemning tens of millions of dollars of equipment as obsolete because they couldn't figure out how to create secure systems. Don't try to be cute and say "Ohh, they'll get over it and thank us for making their lives more secure. "

 

Screw you.

 

"By  asking Microsoft to support EOS Windows, people are effectively asking us to support an OS that is so old that the modern smartphone didn’t even exist yet. Not counting Pocket PC or Windows Mobile here. An era when dial-up internet was still dominant and the world was still learning how high-speed Internet would impact computer security."

 

How many zero day events you have in the last year? Great job. Keep screwing with everybody til you "learn how high-speed Internet" works.

Microsoft

@JBJBJB - Topic relevance?  Or just a garden-variety rant intended to troll?

Regular Visitor

Let me guess....this is about SMB1, is it not? MS have abandoned SMB1, have they not? MS have screwed tens of thousands by not providing some alternative fix for SMB1 functionality, no? Millions of perfectly fine printers and other devices were left without their full capabilities because MS decided the customer didn't matter. This was done to "keep you safe".

 

Playing dense does not advance your cause. Call it a troll, call it a rant. It's fact. And that is what MS cannot tolerate. And as it so happens, neither can I, the little peon who dares question the motivation, or rather lack of motivation, of the company who is going God knows where.....

Microsoft

@JBJBJB I see... so let's expand the premise of your rant to other market verticals:

  • Should Ford still be supporting the Model T? Some are still in drivable condition.  Is Ford screwing their owners because the Model T won't go 70mph on the highway, and Ford won't grant a fix to make it go 70 safely?
  • Should the audio/video industry still be supporting cassette and VCR tapes?  Aren't they still capable of storing content?  Are Walkman/VCR owners getting screwed because no new content is being released in either form factor?
  • Back to computers- should owners of AT systems with a 286 processor consider themselves screwed because they can't get a version of Windows 10 to install, much less to install from 5 1/4" floppy?

Change is inevitable; conditions and requirements are fluid.  Sometimes individuals with your mindset must be dragged, kicking and screaming, towards a better and, most importantly, more secure business solution.  If that's not feasible, maybe this isn't the business for you- check to see if your local library is hiring. 

 

Books- now THERE'S a reliable technology.

Occasional Visitor

geakin, your condescending attitude apparently will carry you far at Microsoft, since is seems to reflect  the corporate concept of customer service. Your list of "whatabouts" is rather juvenile. Ford still makes automobiles. Microsoft doesn't make a replacement for SMB1's functionality. What have you contributed toward filling this gap?

Microsoft

History of SMB - MoSMB

Introduction to SMB (Server Message Block) Protocol (minitool.com)

 

Please scan through each non-aligned, 3rd-party article to learn about Microsoft's replacement(s) for SMB1's functionality.

  

 

Regular Visitor

"Blame your developers for not keeping up with SMB security evolution, not Microsoft."

 

No. I blame MS for stupidly implementing buggy, risky code.

Today is 9/7/2021.

There are 1127 CVE Records that match Win10 as of today.

There are 1241 CVE Records that match Win 7 as of today.

There are 6342 CVE Records that match Microsoft as of today.

A favorite..

CVE-2016-3238The Print Spooler service in Microsoft Windows Vista SP2, Windows Server 2008 SP2 and R2 SP1, Windows 7 SP1, Windows 8.1, Windows Server 2012 Gold and R2, Windows RT 8.1, and Windows 10 Gold and 1511 allows man-in-the-middle attackers to execute arbitrary code by providing a crafted print driver during printer installation, aka "Windows Print Spooler Remote Code Execution Vulnerability."
 
Since 20 friggin' 16. What was this about "keeping up"?

 

I can see why you don't want anyone looking at MS. Place the blame on others. Great strategy.

I, and as many associates as I can persuade, have left MS for other venues.

 

 

 

 

 

Microsoft

Only now do I realize this isn't about SMB1 anymore.  My apologies.

Microsoft

The problem with code that is tens of millions of lines, touched by thousands of different engineers of varying skill, and is decades old, is that it's buggy. That's true for all operating systems, not just Windows. I'll use CVE's as an example since that seems to be your preferred metric.

 

Top 50 products having highest number of cve security vulnerabilities (cvedetails.com)

 

Look by year and you'll see that sometimes Windows is near the top, sometime a Linux distro is at the top, sometimes Android is at the top. Sometimes a browser is at the top. Which makes your argument selective and poor at best, and troll bait at worst.

Microsoft

Closing comments to prevent further trolling.

%3CLINGO-SUB%20id%3D%22lingo-sub-1185401%22%20slang%3D%22en-US%22%3ESMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1185401%22%20slang%3D%22en-US%22%3E%3CP%3EHello%20again%2C%20James%20Kehr%20here%20with%20another%20guest%20post.%20Titles%20are%20hard%20to%20do.%20They%20must%20convey%20the%20topic%20to%20the%20reader%20while%20being%20both%20interesting%20and%20informative%2C%20all%20at%20the%20same%20time.%20Doing%20this%20with%20a%20technical%20article%20makes%20life%20even%20harder.%20Now%20imagine%20my%20dilemma%20when%20starting%20an%20article%20about%20SMB1%20behaviors%20in%20modern%20Windows.%20Think%20about%20that%20for%20a%20minute.%20Go%20ahead.%20The%20article%20will%20still%20be%20here.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EToday%20I'll%20explain%20why%20you%20still%20see%20a%20little%20SMB1%20on%20your%20network%20even%20after%20you%20uninstalled%20SMB1%20from%20Windows%2C%20and%20why%20it's%20a%20good%20thing.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH4%20id%3D%22toc-hId--707860838%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%20id%3D%22toc-hId--706905325%22%3ESMB1%20is%20Dead!%3C%2FH4%3E%0A%3CP%3EThe%20end%20of%20SMB%20version%201%20(SMB1)%20topic%20has%20been%20discussed%20in%20great%20detail%20by%20Ned%20Pyle%2C%20who%20runs%20the%20SMB%20show%20here%20at%20Microsoft.%20Go%20read%20%3CA%20href%3D%22https%3A%2F%2Faka.ms%2FStopUsingSMB1%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3Ethis%20article%3C%2FA%3E%20if%20you%20have%20not.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EAt%20first%20glance%20this%20seems%20like%20I%E2%80%99m%20beating%20a%20dead%20horse.%20If%20that%E2%80%99s%20what%20you%20thought%2C%20you%E2%80%99d%20be%20right.%20Unfortunately%2C%20this%20figuratively%20dead%20horse%20needs%20to%20be%20beaten%3CSUP%3E1%3C%2FSUP%3E%20some%20more.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPlease%20stop%20using%20SMB1.%20Please%20get%20rid%20of%20those%20ancient%2C%20legacy%20systems%20that%20only%20support%20SMB1.%20We%20constantly%20get%20cases%20from%20customers%20asking%20why%20modern%20Windows%2010%20doesn%E2%80%99t%20support%20SMB1%20out-of-the-box%20so%20it%20will%20work%20with%20their%20old%2C%20insecure%20systems.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELet%E2%80%99s%20go%20over%20this%20one%20last%20time.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EThe%20only%20versions%20of%20Windows%20that%20require%20SMB1%20are%20end-of-support%20(EOS).%20By%20%3CU%3Eyears%3C%2FU%3E!%20These%20are%20Windows%20Server%202003%20(EOS%20July%202015)%2C%20Windows%202000%20Server%20(EOS%20July%202010)%2C%20their%20client%20editions%2C%20and%20older.%3C%2FLI%3E%0A%3CLI%3ESamba%20and%20Linux%20distros%20like%20Ubuntu%20have%20retired%20SMB1%20as%20well.%20If%20you%20have%20a%20Linux%2FUnix-like%20distro%20that%20only%20supports%20SMB1%2C%20it%E2%80%99s%20time%20to%20upgrade.%3C%2FLI%3E%0A%3CLI%3ENot%20only%20does%20Microsoft%20not%20support%20these%20EOS%20operating%20systems%20(OS%E2%80%99s)%2C%20we%20do%20not%20support%20interoperability%20with%20them.%20Meaning%2C%20if%20the%20latest%20version%20of%20Windows%2010%20does%20no%20work%20with%20an%20EOS%20version%20of%20Windows%20over%20SMB%2C%20Microsoft%20will%20not%20support%20you.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWhy%20not%3F%20Let%E2%80%99s%20start%20by%20putting%20the%20age%20of%20Windows%202000%20(W2000)%20and%202003%20(W2003)%20into%20perspective.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EEOS%20Windows%20versus%20Apple%3A%26nbsp%3B%3CUL%3E%0A%3CLI%3EWindows%202000%20was%20released%207%20years%20before%20the%20first%20iPhone.%3C%2FLI%3E%0A%3CLI%3EWindows%202003%2FXP%20was%20released%204%20years%20before%20the%20first%20iPhone.%3C%2FLI%3E%0A%3CLI%3EApple%20computers%20were%20still%20running%20IBM%20PowerPC%20processors.%3C%2FLI%3E%0A%3CLI%3EAsking%20for%20EOS%20Windows%20support%20is%20like%20asking%20Apple%20to%20support%20PowerPC%20Macs.%20I%E2%80%99m%20sure%20Apple%20support%20would%20get%20a%20good%20laugh%20out%20of%20the%20request%2C%20but%20I%20imagine%20that%E2%80%99s%20as%20far%20as%20the%20request%20would%20go.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%E2%80%A6%20vs%20Android%3CUL%3E%0A%3CLI%3EDidn%E2%80%99t%20even%20exist.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3E%E2%80%A6%20vs%20Linux%3CUL%3E%0A%3CLI%3EKernel%202.2.14%20was%20released%20the%20same%20year%20as%20Windows%202000.%3C%2FLI%3E%0A%3CLI%3EVersion%202.4%20was%20the%20newest%20kernel%20when%20Windows%20Server%202003%20launched.%3C%2FLI%3E%0A%3CLI%3ESupport%20for%20the%20last%20version%20of%20the%20version%202%20kernel%2C%202.6.32%2C%20ended%20in%202016.%3C%2FLI%3E%0A%3CLI%3EHow%20fast%20do%20you%20think%20the%20%E2%80%9Cno%E2%80%9D%20would%20come%20back%20from%20Linux%20distro%20support%20if%20you%20asked%20for%20support%20on%20kernel%202.2%20or%202.4%3F%20Assuming%20your%20distro%20of%20choice%20even%20existed%20back%20then.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EBy%20asking%20Microsoft%20to%20support%20EOS%20Windows%2C%20people%20are%20effectively%20asking%20us%20to%20support%20an%20OS%20that%20is%20so%20old%20that%20the%20modern%20smartphone%20didn%E2%80%99t%20even%20exist%20yet.%20Not%20counting%20Pocket%20PC%20or%20Windows%20Mobile%20here.%20An%20era%20when%20dial-up%20internet%20was%20still%20%3CA%20href%3D%22https%3A%2F%2Fmoney.cnn.com%2F2000%2F11%2F01%2Ftechnology%2Ffcc_dsl%2Findex.htm%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Edominant%3C%2FA%3E%20and%20the%20world%20was%20still%20learning%20how%20high-speed%20Internet%20would%20impact%20computer%20security.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EMulti-core%20processors%20didn%E2%80%99t%20exist%20yet%2C%20outside%20of%20the%20mainframe%20space.%20Those%20didn%E2%80%99t%20come%20around%20until%202004%20(AMD)%20and%202005%20(Intel).%20X86%2064-bit%20processors%20didn%E2%80%99t%20exist%20when%20W2000%20was%20released%20and%20they%20were%20brand%20new%20for%20W2003.%20Running%20legacy%20OS%E2%80%99s%20is%20not%20just%20bad%20security%2C%20it%E2%80%99s%20scary%20security%20because%20you%20are%20running%20an%20OS%20built%20for%20a%20completely%20different%20era%20of%20computing.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20real%20question%20here%20is%3A%20Why%20are%20you%20still%20running%20an%20OS%20or%20device%20that%20is%20so%20old%20it%20requires%20SMB1%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH4%20id%3D%22toc-hId-1779651995%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%20id%3D%22toc-hId-1780607508%22%3EThe%20SMB1%20Problem%3C%2FH4%3E%0A%3CP%3EThe%20biggest%20problem%20with%20SMB1%20is%20that%20it%20was%20developed%20for%20the%20pre-Internet%20era.%20The%20first%20dialect%20came%20out%20in%201983%20from%20IBM.%20Security%20and%20performance%20were%20designed%20for%20closed%20token%20ring%20networks%20and%20old%20fashion%20spinny%20disks.%20As%20EternalBlue%20and%20WannaCry%20would%20later%20prove%2C%20it%20is%20not%20a%20protocol%20that%20has%20aged%20well%20and%20it%20is%20no%20longer%20safe%20to%20use.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EUnlike%20most%20other%20deprecated%20protocols%2C%20however%2C%20SMB1%20controls%20the%20keys%20to%20the%20kingdom%3A%20data%2C%20services%2C%20file%20systems%2C%20accounts%2C%20and%20more.%20This%20makes%20SMB1%20exploits%20critically%20harmful.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWhen%20Microsoft%20decided%20to%20retire%20SMB1%20for%20real%2C%20and%20stop%20asking%20nicely%2C%20we%20tore%20off%20that%20band-aid%20by%20removing%20it%20completely%20from%20Windows%2010%20Spring%202017%20Update%20(Win10%201703)%2C%20when%20Windows%20detected%20that%20SMB1%20was%20not%20in%20use.%20No%20SMB1%20dialect%20was%20sent%20during%20negotiation%2C%20no%20SMB1%20was%20allowed%20at%20all.%20And%20that%20broke%20things.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EIt%20turned%20out%20that%20some%20devices%20which%20only%20know%20about%20SMB1%20weren%E2%80%99t%20quite%20sure%20what%20to%20do%20when%20getting%20an%20SMB%20request%20with%20no%20SMB1%20in%20it.%20This%20caused%20a%20lot%20of%20strange%20behavior%20on%20the%20Windows-side%3B%20namely%2C%20hanging%20or%20pausing%20until%20everything%20finally%20timed%20out.%20This%20manifested%20in%20Windows%20as%20an%20unresponsive%20Windows%20Explorer%20(the%20technical%20name%20for%20the%20yellow%20folder%20icon%20you%20click%20on%20to%20access%20your%20files).%20People%20don%E2%80%99t%20like%20that.%20I%20don%E2%80%99t%20like%20that.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EWe%20ended%20up%20making%20changes%20to%20mitigate%20this%20without%20actually%20enabling%20SMB1.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EWindows%2010%201709%20(2017%20Fall%20Update)%20and%20newer%20will%20send%20SMB1%20dialects%20as%20part%20of%20the%20SMB%20negotiate.%20We%20do%20this%20to%20help%20interoperability%20with%20legacy%20devices.%20I.E.%20prevent%20Windows%20Explorer%20from%20pausing%2Fhanging.%3C%2FLI%3E%0A%3CLI%3EWe%20will%20not%20actually%20allow%20an%20SMB1%20connection%20when%20SMB1%20is%20disabled.%20We%20only%20pretend%20to.%20The%20connection%20will%20end%20up%20getting%20closed%20when%20the%20server%20or%20client%20tries%20to%20use%20an%20SMB1%20dialect.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EIn%20addition%20to%20preventing%20uncomfortably%20long%20waits%20for%20Windows%20users%2C%20it%20lets%20us%20bubble%20up%20messages%20about%20SMB1%20only%20devices%20on%20your%20network.%20System%20admins%20can%20look%20in%20the%3CSTRONG%3E%20Event%20Viewer%20%26gt%3B%20Applications%20and%20Services%20Logs%20%26gt%3B%20Microsoft%20%26gt%3B%20Windows%20%26gt%3B%20SMBServer-Operational%20log%3C%2FSTRONG%3E%20for%20event%20ID%20%3CSTRONG%3E1001%3C%2FSTRONG%3E%2C%20which%20is%20created%20when%20SMB1%20is%20used.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ELog%20Name%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Microsoft-Windows-SMBServer%2FOperational%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ESource%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Microsoft-Windows-SMBServer%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EDate%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%209%2F17%2F2019%2012%3A17%3A41%20PM%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EEvent%20ID%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%201001%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ETask%20Category%3A%20(1001)%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ELevel%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20%26nbsp%3B%26nbsp%3BInformation%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EKeywords%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20(8)%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EUser%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20N%2FA%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EComputer%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20DC01%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EDescription%3A%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EA%20client%20attempted%20to%20access%20the%20server%20using%20SMB1%20and%20was%20rejected%20because%20SMB1%20file%20sharing%20support%20is%20disabled%20or%20has%20been%20uninstalled.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EGuidance%3A%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EAn%20administrator%20has%20disabled%20or%20uninstalled%20server%20support%20for%20SMB1.%20Clients%20running%20Windows%20XP%20%2F%20Windows%20Server%202003%20R2%20and%20earlier%20will%20not%20be%20able%20to%20access%20this%20server.%20Clients%20running%20Windows%20Vista%20%2F%20Windows%20Server%202008%20and%20later%20no%20longer%20require%20SMB1.%20To%20determine%20which%20clients%20are%20attempting%20to%20access%20this%20server%20using%20SMB1%2C%20use%20the%20Windows%20PowerShell%20cmdlet%20Set-SmbServerConfiguration%20to%20enable%20SMB1%20access%20auditing.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESMB1%20auditing%20can%20be%20also%20be%20enabled%20to%20get%20more%20details%20about%20what%20is%20using%20SMB1%20on%20your%20network.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CPRE%3E%3CSTRONG%3ESet-SmbServerConfiguration%20-AuditSmb1Access%20%24true%3C%2FSTRONG%3E%3C%2FPRE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ELog%20Name%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Microsoft-Windows-SMBServer%2FAudit%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ESource%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Microsoft-Windows-SMBServer%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EDate%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%2012%2F13%2F2019%2011%3A37%3A53%20AM%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EEvent%20ID%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%203000%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ETask%20Category%3A%20None%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ELevel%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Information%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EKeywords%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EUser%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20N%2FA%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EComputer%3A%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20DC01.Contoso.com%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EDescription%3A%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3ESMB1%20access%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EClient%20Address%3A%20192.168.1.214%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EGuidance%3A%3C%2FEM%3E%3C%2FP%3E%0A%3CP%20class%3D%22lia-indent-padding-left-30px%22%3E%3CEM%3EThis%20event%20indicates%20that%20a%20client%20attempted%20to%20access%20the%20server%20using%20SMB1.%20To%20stop%20auditing%20SMB1%20access%2C%20use%20the%20Windows%20PowerShell%20cmdlet%20Set-SmbServerConfiguration.%3C%2FEM%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId-1068084313%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%20id%3D%22toc-hId-1069039826%22%3ENegotiation%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20SMB%20Negotiate%20command%20is%20where%20the%20SMB%20dialect%20is%20%E2%80%A6well%E2%80%A6%20negotiated.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20SMB%20Client%20%E2%80%93%20the%20system%20requesting%20access%20to%20the%20remote%20file%20system%20%E2%80%93%20sends%20a%20list%20of%20all%20the%20dialects%20it%20supports.%20A%20dialect%20is%20a%20revision%20of%20the%20SMB%20protocol%20specification.%20Every%20revision%20of%20the%20SMB%20protocol%20has%2C%20so%20far%2C%20gotten%20a%20new%20dialect.%20Though%20SMB%203.1.1%20was%20built%20to%20be%20more%20extensible%20so%20it%20may%20be%20a%20while%20before%20the%20next%20dialect%20is%20created.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20SMB%20Server%20%E2%80%93%20the%20system%20hosting%20the%20file%20system%20%E2%80%93%20then%20selects%20the%20newest%20dialect%20that%20both%20client%20and%20server%20support.%20When%20the%20server%20supports%20none%20of%20the%20client%20protocols%20it%20aborts%20the%20connection%20with%20a%20TCP%20RST%20(reset).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHow%20does%20faux%20SMB1%20support%20work%20with%20Negotiate%3F%20Delicately.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EHere%E2%80%99s%20what%20it%20looks%20like%20when%20a%20Windows%20SMB%20Server%20rejects%20an%20SMB1%20only%20connection%20from%20an%20SMB%20Client.%20This%20is%20the%20SMB1%20only%20request%2C%20as%20seen%20by%20Wireshark.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%3E%0A%3CP%3E%3CSTRONG%3ENo.%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E%3CSTRONG%3ETime%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E%3CSTRONG%3ESource%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E%3CSTRONG%3EDestination%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E%3CSTRONG%3EProtocol%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E%3CSTRONG%3ELength%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E%3CSTRONG%3EInfo%3C%2FSTRONG%3E%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%3E%0A%3CP%3E24%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E6.892775%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E192.168.1.214%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E192.168.1.215%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3ESMB%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E191%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3ENegotiate%20Protocol%20Request%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%E2%80%A6%3C%2FP%3E%0A%3CP%3ESMB%20(Server%20Message%20Block%20Protocol)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20SMB%20Header%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Negotiate%20Protocol%20Request%20(0x72)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Word%20Count%20(WCT)%3A%200%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Byte%20Count%20(BCC)%3A%2098%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Requested%20Dialects%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20PC%20NETWORK%20PROGRAM%201.0%26nbsp%3B%26nbsp%3B%20%26lt%3B%26lt%3B%26lt%3B%26lt%3B%26lt%3B%26lt%3B%20These%20are%20all%20the%20old%20SMB1%20dialects%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20LANMAN1.0%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20Windows%20for%20Workgroups%203.1a%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20LM1.2X002%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20LANMAN2.1%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20NT%20LM%200.12%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThis%20is%20Windows%20saying%20%E2%80%9CNOPE!%E2%80%9D%20to%20SMB1%20in%20the%20form%20of%20an%20immediate%20TCP%20reset.%20Get%20thee%20gone%2C%20SMB1!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%3E%0A%3CP%3E25%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E6.893143%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E192.168.1.215%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E192.168.1.214%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3ETCP%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E54%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%3E%0A%3CP%3E445%20%E2%86%92%2049769%20%5BRST%2C%20ACK%5D%20Seq%3D1%20Ack%3D138%20Win%3D0%20Len%3D0%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENow%20let%E2%80%99s%20look%20at%20the%20Windows%20SMB1%20discovery%20packet.%20In%20this%20test%20I%20have%20disabled%20SMB2%20support%20on%20a%20Windows%20Server.%20The%20SMB%20Client%20is%20a%20standard%20Win10%201909%20client.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%20width%3D%22624%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2242%22%3E%0A%3CP%3ENo.%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2296%22%3E%0A%3CP%3ETime%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22114%22%3E%0A%3CP%3ESource%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22114%22%3E%0A%3CP%3EDestination%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2260%22%3E%0A%3CP%3EProtocol%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22198%22%3E%0A%3CP%3EInfo%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2242%22%3E%0A%3CP%3E4%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2296%22%3E%0A%3CP%3E15%3A50%3A48.03%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22114%22%3E%0A%3CP%3E192.168.1.211%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22114%22%3E%0A%3CP%3E192.168.1.109%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2260%22%3E%0A%3CP%3ESMB%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22198%22%3E%0A%3CP%3ENegotiate%20Protocol%20Request%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%E2%80%A6%3C%2FP%3E%0A%3CP%3ESMB%20(Server%20Message%20Block%20Protocol)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20SMB%20Header%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Negotiate%20Protocol%20Request%20(0x72)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%20%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3BWord%20Count%20(WCT)%3A%200%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Byte%20Count%20(BCC)%3A%2034%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Requested%20Dialects%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20NT%20LM%200.12%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20SMB%202.002%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Dialect%3A%20SMB%202.%3F%3F%3F%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20are%20three%20Dialects%20listed%20in%20the%20Negotiate%20Protocol%20Request%20frame%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3ENT%20LM%200.12%20%E2%80%93%20This%20is%20the%20final%20SMB1%20dialect%20created%2C%20also%20known%20as%20the%20CIFS%20dialect.%3C%2FLI%3E%0A%3CLI%3ESMB%202.002%20%E2%80%93%20This%20is%20the%20first%20SMB2%20dialect%20released%20with%20Windows%20Vista.%3C%2FLI%3E%0A%3CLI%3ESMB%202.%3F%3F%3F%20%E2%80%93%20This%20is%20the%20wildcard%20SMB2%20dialect.%20Which%20I%20won%E2%80%99t%20go%20into%20here.%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3ENT%20LM%200.12%20(CIFS)%20is%20a%20red%20herring.%20This%20is%20the%20newer%20mechanism%20in%20Win10%20to%20flush%20out%20SMB1%20only%20devices.%20My%20test%20server%2C%20which%20only%20has%20SMB1%20enabled%2C%20does%20what%20it%E2%80%99s%20supposed%20to%20do%20and%20tries%20to%20catch%20the%20red%20herring.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%20width%3D%22624%22%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2239%22%3E%0A%3CP%3ENo.%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22103%22%3E%0A%3CP%3ETime%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22119%22%3E%0A%3CP%3ESource%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22119%22%3E%0A%3CP%3EDestination%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2279%22%3E%0A%3CP%3EProtocol%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22164%22%3E%0A%3CP%3EInfo%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2239%22%3E%0A%3CP%3E5%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22103%22%3E%0A%3CP%3E15%3A50%3A48.04%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22119%22%3E%0A%3CP%3E192.168.1.109%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22119%22%3E%0A%3CP%3E192.168.1.211%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2279%22%3E%0A%3CP%3ESMB%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22164%22%3E%0A%3CP%3ENegotiate%20Protocol%20Response%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%E2%80%A6%3C%2FP%3E%0A%3CP%3ESMB%20(Server%20Message%20Block%20Protocol)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20SMB%20Header%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Negotiate%20Protocol%20Response%20(0x72)%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Word%20Count%20(WCT)%3A%2017%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%26nbsp%3B%20Selected%20Index%3A%200%3A%20NT%20LM%200.12%26nbsp%3B%20%26lt%3B%26lt%3B%26lt%3B%26lt%3B%26lt%3B%26lt%3B%26lt%3B%26lt%3B%20The%20server%20took%20the%20bait.%3C%2FP%3E%0A%3CP%3E%E2%80%A6%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ECan%20you%20guess%20what%20happens%20next%3F%20If%20you%20guessed%20that%20the%20Win10%20SMB%20Client%20sent%20the%20SMB%20Server%20a%20big%20fat%20%E2%80%9CNOPE!%E2%80%9D%20in%20the%20form%20of%20a%20TCP%20RST%2C%20you%20would%20be%20correct.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CTABLE%3E%0A%3CTBODY%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2239%22%3E%0A%3CP%3ENo.%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22103%22%3E%0A%3CP%3ETime%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22119%22%3E%0A%3CP%3ESource%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22119%22%3E%0A%3CP%3EDestination%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2279%22%3E%0A%3CP%3EProtocol%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22158%22%3E%0A%3CP%3EInfo%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3CTR%3E%0A%3CTD%20width%3D%2239%22%3E%0A%3CP%3E6%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22103%22%3E%0A%3CP%3E15%3A50%3A48.04%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22119%22%3E%0A%3CP%3E192.168.1.211%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22119%22%3E%0A%3CP%3E192.168.1.109%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%2279%22%3E%0A%3CP%3ETCP%3C%2FP%3E%0A%3C%2FTD%3E%0A%3CTD%20width%3D%22158%22%3E%0A%3CP%3E53994%20%E2%86%92%20445%20%5BRST%2C%20ACK%5D%20Seq%3D74%20Ack%3D132%20Win%3D0%20Len%3D0%3C%2FP%3E%0A%3C%2FTD%3E%0A%3C%2FTR%3E%0A%3C%2FTBODY%3E%0A%3C%2FTABLE%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%E2%80%9CWhy%20not%20just%20fix%20SMB1%3F%E2%80%9D%20you%20may%20ask.%20We%20did!%20It%E2%80%99s%20called%20SMB2.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CH1%20id%3D%22toc-hId--739370150%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%20id%3D%22toc-hId--738414637%22%3ELong%20Live%20SMB2%3C%2FH1%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EDevs%20and%20marketing%20teams%20like%20bigger%20version%20numbers.%20Devs%20because%20it%20allows%20them%20to%20track%20changes.%20Marketing%20teams%20because%20bigger%20numbers%20mean%20you%20have%20something%20new%20to%20sell.%20The%20number%20of%20changes%20made%20between%20SMB1%20and%20SMB2%20was%20staggering.%20The%20entire%20protocol%20was%20redesigned%20from%20the%20ground%20up.%20New%20commands%2C%20WAN%20optimizations%20galore%2C%20tightened%20security%2C%20more%20features%E2%80%A6it%20was%20the%20stuff%20of%20marketer%E2%80%99s%20dreams.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EInstead%20of%20adding%20yet%20another%20dialect%20to%20SMB%2C%20it%20was%20decided%20that%20a%20new%20major%20version%20of%20SMB%20was%20needed.%20This%20was%20a%20justified%20move%20given%20that%20the%20entire%20protocol%20spec%20was%20essentially%20rewritten.%20Only%20concepts%20from%20the%20original%20SMB%20and%20CIFS%20protocols%20were%20adopted.%20And%20thus%2C%20%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fopenspecs%2Fwindows_protocols%2Fms-smb2%2F5606ad47-5ee0-437a-817e-70c366052962%22%20target%3D%22_self%22%20rel%3D%22noopener%20noreferrer%22%3EMS-SMB2%3C%2FA%3E%20was%20born.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESMB2%20has%20now%20become%20SMB3.%20This%20is%20more%20of%20a%20marketing%20move%20since%20SMB3%20still%20uses%20the%20MS-SMB2%20protocol%20spec.%20There%20were%20just%20enough%20changes%20between%20SMB%202.1%20and%20SMB%203.0%20to%20justify%20a%20new%20major%20version.%20On%20an%20interesting%20historical%20note%2C%20SMB3%20was%20originally%20SMB%202.2%20until%20the%20marketing%20team%20got%20involved.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ENow%2C%20on%20top%20of%20the%20fancy%20protocol%20redesign%2C%20Microsoft%20has%20added%20several%20cool%20new%20features%2C%20and%20continues%20to%20do%20so.%20Things%20like%20SMB%20Encryption%20allows%20full%20AES%20encryption%20of%20data%20payloads%20to%20prevent%20man-in-the-middle%20(MITM)%20snooping%20and%20attacks.%20Continuous%20Availability%20provides%20seamless%20failover%20between%20clustered%20file%20servers.%20SMB%20Direct%20allows%20multiple%20hundreds%20of%20Gbps%20of%20throughput%20between%20RDMA%20capable%20servers%20while%20only%20sipping%20CPU%20cycles.%20The%20list%20goes%20on%20and%20new%20features%20are%20added%20all%20the%20time%20to%20adapt%20SMB%20to%20the%20ever-changing%20network%20landscape%2C%20like%20SMB%20over%20QUIC%20and%20SMB%20compression%20arriving%20in%20future%20builds%20of%20Windows.%20Or%2C%20now%2C%20if%20you%E2%80%99re%20reading%20this%20far%20enough%20in%20the%20future.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThere%20really%20is%20no%20reason%20to%20keep%20SMB1%20around%20anymore.%20Managers%20like%20to%20cite%20cost%20as%20the%20reason%2C%20but%2C%20when%20you%20think%20about%20the%20potential%20cost%20of%20a%20data%20breach%2C%20is%20it%20really%20worth%20the%20risk%3F%20Why%20would%20anyone%20want%20to%20keep%20around%20a%20system%20that%20can%20only%20use%20network%20protocols%20known%20to%20be%20exploitable%20and%20control%20the%20keys%20to%20the%20kingdom%3F%20Hopefully%2C%20the%20answer%20to%20these%20questions%20are%2C%20no%20and%20heck%20no.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ESMB%20is%20dead%2C%20long%20live%20SMB!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSUP%3E1%3C%2FSUP%3E%20%E2%80%93%20No%20animals%20were%20harmed%20during%20the%20creation%20of%20this%20article.%20Some%20electrons%20were%20deeply%20offended%2C%20but%20that%E2%80%99s%20about%20it.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-TEASER%20id%3D%22lingo-teaser-1185401%22%20slang%3D%22en-US%22%3E%3CP%3EAn%20update%20on%20some%20expected%20SMB1%20behaviors%20in%20modern%20Windows%20even%20after%20you%20uninstalled%20SMB1%2C%20and%20why%20you%20should%20still%20not%20be%20using%20SMB1.%3C%2FP%3E%3C%2FLINGO-TEASER%3E%3CLINGO-LABS%20id%3D%22lingo-labs-1185401%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3ESMB%3C%2FLINGO-LABEL%3E%3CLINGO-LABEL%3EWindows%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1201756%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1201756%22%20slang%3D%22en-US%22%3E%3CP%3ESadly%2C%20as%20of%20last%20year%20there%20are%20still%20printers%2Fscanners%20being%20made%20with%20smb%20v1%20only%20....%20and%20of%20course%20zero%20plans%20on%20updating%20any%20old%20models.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1253932%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1253932%22%20slang%3D%22en-US%22%3E%3CP%3EPlease%20update%20the%20title%20of%20this%20post%20it%20is%20read%20as%20SMB%20is%20Dead.%20Also%20last%20sentence%20again%3A%26nbsp%3B%3CSPAN%3ESMB%20is%20dead%2C%20long%20live%20SMB!%3C%2FSPAN%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CSPAN%3Eam%20I%20wrong%20or%20it%20should%20be%20SMB1%20is%20dead%3F%3C%2FSPAN%3E%3C%2FP%3E%0A%3CP%3E%3CSPAN%3EThanks%20James!%20Awesome%20article%3C%2FSPAN%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1254029%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1254029%22%20slang%3D%22en-US%22%3E%3CP%3EHi%26nbsp%3B%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F308600%22%20target%3D%22_blank%22%3E%40carlosmayol%3C%2FA%3E%2C%26nbsp%3Bthanks!%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20title%20is%20a%20play%20on%20an%20old%20British%20phrase%3A%20The%20King%20is%20dead%2C%20long%20live%20the%20King!%20King%20is%20replaced%20with%20Queen%20when%20the%20monarch%20involved%20is%20female%2C%20of%20course.%20It%20is%20used%20when%20the%20monarch%20passes%20to%20signify%20a%20change%20in%20monarch.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThe%20first%20King%2FQueen%20is%20the%20one%20who%20has%20passed%20away.%20The%20second%20King%2FQueen%20is%20the%20new%20monarch.%20The%20actual%20name%20of%20the%20monarch%20is%20never%20mentioned.%20Using%20SMB1%20and%20SMB2%20in%20the%20title%20wouldn't%20fit%20the%20phrase%20correctly.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1254038%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1254038%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F570955%22%20target%3D%22_blank%22%3E%40Jeremy707%3C%2FA%3E%2C%26nbsp%3Bwe%20have%20been%20working%20with%20printer%20vendors%20and%20the%20like%20to%20remove%20SMB1.%20Progress%20is%20being%20made%20on%20this%20front.%20Sometimes%20not%20as%20fast%20as%20we%20would%20like.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1515978%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1515978%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F286900%22%20target%3D%22_blank%22%3E%40JamesKehr%3C%2FA%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ERegarding%20SMB%20Event%20ID%203000%20-%20I've%20seen%20conflicting%20information%20regarding%20whether%20the%20SMB1%20%3CEM%3Eattempt%3C%2FEM%3E%20is%20successful%20or%20unsuccessful.%20Could%20you%20please%20clarify%20which%20is%20the%20case%3F%20The%20language%20is%20a%20little%20ambiguous.%20Thanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1553197%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1553197%22%20slang%3D%22en-US%22%3E%3CP%3EAwfully%20glad%20to%20see%20this%20post%2C%20especially%20when%20my%20customer%20comes%20to%20me%20while%20auditing%20deprecated%20protocols%20and%20trying%20to%20find%20the%20culprit%20leaving%20Protocol%20type%20SMB%20in%20his%20traces%20%2F%20logs.%26nbsp%3B%20Should%20be%20another%20mystery%20successfully%20solved.%26nbsp%3B%3CIMG%20class%3D%22lia-deferred-image%20lia-image-emoji%22%20src%3D%22https%3A%2F%2Fgxcuf89792.i.lithium.com%2Fhtml%2Fimages%2Femoticons%2Fsmile_40x40.gif%22%20alt%3D%22%3Asmile%3A%22%20title%3D%22%3Asmile%3A%22%20%2F%3E%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-1699990%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-1699990%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F725456%22%20target%3D%22_blank%22%3E%40NMFR1%3C%2FA%3E%2C%26nbsp%3Bit%20doesn't%20report%20whether%20it's%20successful%20or%20not.%20Only%20that%20an%20attempt%20was%20made.%20Look%20for%20event%20IDs%201001%20in%20..%5CSMB%20Server%5COperational%2C%20and%20..%5CSMB%20Server%5CAudit%203000%2C%203002%2C%20and%203003%20(SMB1%20uninstall%20event)%20for%20all%20the%20SMB1%20events.%20If%20you%20enable%20analytic%20logging%2C%20the%20SMB%20Server%20analytic%20log%20event%201804%20will%20tell%20you%20when%20no%20SMB1%20was%20attempted%20in%20the%20past%2020%20minutes.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2103599%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2103599%22%20slang%3D%22en-US%22%3E%3CP%3ECan%20anyone%20please%20share%20the%20list%20of%20features%20available%20in%20SMB%20v2%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EThanks%20in%20advance.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2220004%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2220004%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F945178%22%20target%3D%22_blank%22%3E%40AnjuAhlawat1691%3C%2FA%3E%26nbsp%3Bthis%20is%20a%20very%20long%20list.%20Primary%20among%20the%20changes%20are%20vastly%20improved%20security%20(SMB%20Encryption)%2C%20performance%20(multi-credit%20operations%2C%20compression%20(coming%20soon(TM)%2C%20SMB%20over%20RDMA%2C%20etc.)%2C%20less%20chatty%2C%20more%20efficient%20over%20WAN's%2C%20Scale%20Out%20File%20Server%2C%20and%20much%2C%20much%20more.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EThese%20are%20some%20articles%20that%20cover%20the%20basics.%20Please%20note%20that%20features%20vary%20between%20OS%20versions%20and%20implementations%20(i.e.%20Samba%2C%20NetApp%2C%20etc.%20implement%20only%20a%20subset%20of%20the%20total%20features%20available%2C%20and%20older%20versions%20of%20Windows%2FLinux%20won't%20support%20the%20newest%20features).%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fprevious-versions%2Fwindows%2Fit-pro%2Fwindows-server-2012-R2-and-2012%2Fhh831474(v%3Dws.11)%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EWhat's%20New%20in%20SMB%20in%20Windows%20Server%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Fwindows-server%2Fstorage%2Ffile-server%2Ffile-server-smb-overview%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3EOverview%20of%20file%20sharing%20using%20the%20SMB%203%20protocol%20in%20Windows%20Server%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fdocs.microsoft.com%2Fen-us%2Ftroubleshoot%2Fwindows-server%2Fhigh-availability%2Fsmb-3-file-server-features%22%20target%3D%22_blank%22%20rel%3D%22noopener%20noreferrer%22%3ENew%20SMB%20file%20server%203.0%20features%20-%20Windows%20Server%20%7C%20Microsoft%20Docs%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CDIV%20class%3D%22ms-editor-squiggler%22%20style%3D%22color%3A%20initial%3B%20font%3A%20initial%3B%20font-feature-settings%3A%20initial%3B%20font-kerning%3A%20initial%3B%20font-optical-sizing%3A%20initial%3B%20font-variation-settings%3A%20initial%3B%20forced-color-adjust%3A%20initial%3B%20text-orientation%3A%20initial%3B%20text-rendering%3A%20initial%3B%20-webkit-font-smoothing%3A%20initial%3B%20-webkit-locale%3A%20initial%3B%20-webkit-text-orientation%3A%20initial%3B%20-webkit-writing-mode%3A%20initial%3B%20writing-mode%3A%20initial%3B%20zoom%3A%20initial%3B%20place-content%3A%20initial%3B%20place-items%3A%20initial%3B%20place-self%3A%20initial%3B%20alignment-baseline%3A%20initial%3B%20animation%3A%20initial%3B%20appearance%3A%20initial%3B%20aspect-ratio%3A%20initial%3B%20backdrop-filter%3A%20initial%3B%20backface-visibility%3A%20initial%3B%20background%3A%20initial%3B%20background-blend-mode%3A%20initial%3B%20baseline-shift%3A%20initial%3B%20block-size%3A%20initial%3B%20border-block%3A%20initial%3B%20border%3A%20initial%3B%20border-radius%3A%20initial%3B%20border-collapse%3A%20initial%3B%20border-end-end-radius%3A%20initial%3B%20border-end-start-radius%3A%20initial%3B%20border-inline%3A%20initial%3B%20border-start-end-radius%3A%20initial%3B%20border-start-start-radius%3A%20initial%3B%20inset%3A%20initial%3B%20box-shadow%3A%20initial%3B%20box-sizing%3A%20initial%3B%20break-after%3A%20initial%3B%20break-before%3A%20initial%3B%20break-inside%3A%20initial%3B%20buffered-rendering%3A%20initial%3B%20caption-side%3A%20initial%3B%20caret-color%3A%20initial%3B%20clear%3A%20initial%3B%20clip%3A%20initial%3B%20clip-path%3A%20initial%3B%20clip-rule%3A%20initial%3B%20color-interpolation%3A%20initial%3B%20color-interpolation-filters%3A%20initial%3B%20color-rendering%3A%20initial%3B%20color-scheme%3A%20initial%3B%20columns%3A%20initial%3B%20column-fill%3A%20initial%3B%20gap%3A%20initial%3B%20column-rule%3A%20initial%3B%20column-span%3A%20initial%3B%20contain%3A%20initial%3B%20contain-intrinsic-size%3A%20initial%3B%20content%3A%20initial%3B%20content-visibility%3A%20initial%3B%20counter-increment%3A%20initial%3B%20counter-reset%3A%20initial%3B%20counter-set%3A%20initial%3B%20cursor%3A%20initial%3B%20cx%3A%20initial%3B%20cy%3A%20initial%3B%20d%3A%20initial%3B%20display%3A%20block%3B%20dominant-baseline%3A%20initial%3B%20empty-cells%3A%20initial%3B%20fill%3A%20initial%3B%20fill-opacity%3A%20initial%3B%20fill-rule%3A%20initial%3B%20filter%3A%20initial%3B%20flex%3A%20initial%3B%20flex-flow%3A%20initial%3B%20float%3A%20initial%3B%20flood-color%3A%20initial%3B%20flood-opacity%3A%20initial%3B%20grid%3A%20initial%3B%20grid-area%3A%20initial%3B%20height%3A%200px%3B%20hyphens%3A%20initial%3B%20image-orientation%3A%20initial%3B%20image-rendering%3A%20initial%3B%20inline-size%3A%20initial%3B%20inset-block%3A%20initial%3B%20inset-inline%3A%20initial%3B%20isolation%3A%20initial%3B%20letter-spacing%3A%20initial%3B%20lighting-color%3A%20initial%3B%20line-break%3A%20initial%3B%20list-style%3A%20initial%3B%20margin-block%3A%20initial%3B%20margin%3A%20initial%3B%20margin-inline%3A%20initial%3B%20marker%3A%20initial%3B%20mask%3A%20initial%3B%20mask-type%3A%20initial%3B%20max-block-size%3A%20initial%3B%20max-height%3A%20initial%3B%20max-inline-size%3A%20initial%3B%20max-width%3A%20initial%3B%20min-block-size%3A%20initial%3B%20min-height%3A%20initial%3B%20min-inline-size%3A%20initial%3B%20min-width%3A%20initial%3B%20mix-blend-mode%3A%20initial%3B%20object-fit%3A%20initial%3B%20object-position%3A%20initial%3B%20offset%3A%20initial%3B%20opacity%3A%20initial%3B%20order%3A%20initial%3B%20origin-trial-test-property%3A%20initial%3B%20orphans%3A%20initial%3B%20outline%3A%20initial%3B%20outline-offset%3A%20initial%3B%20overflow-anchor%3A%20initial%3B%20overflow-wrap%3A%20initial%3B%20overflow%3A%20initial%3B%20overscroll-behavior-block%3A%20initial%3B%20overscroll-behavior-inline%3A%20initial%3B%20overscroll-behavior%3A%20initial%3B%20padding-block%3A%20initial%3B%20padding%3A%20initial%3B%20padding-inline%3A%20initial%3B%20page%3A%20initial%3B%20page-orientation%3A%20initial%3B%20paint-order%3A%20initial%3B%20perspective%3A%20initial%3B%20perspective-origin%3A%20initial%3B%20pointer-events%3A%20initial%3B%20position%3A%20initial%3B%20quotes%3A%20initial%3B%20r%3A%20initial%3B%20resize%3A%20initial%3B%20ruby-position%3A%20initial%3B%20rx%3A%20initial%3B%20ry%3A%20initial%3B%20scroll-behavior%3A%20initial%3B%20scroll-margin-block%3A%20initial%3B%20scroll-margin%3A%20initial%3B%20scroll-margin-inline%3A%20initial%3B%20scroll-padding-block%3A%20initial%3B%20scroll-padding%3A%20initial%3B%20scroll-padding-inline%3A%20initial%3B%20scroll-snap-align%3A%20initial%3B%20scroll-snap-stop%3A%20initial%3B%20scroll-snap-type%3A%20initial%3B%20shape-image-threshold%3A%20initial%3B%20shape-margin%3A%20initial%3B%20shape-outside%3A%20initial%3B%20shape-rendering%3A%20initial%3B%20size%3A%20initial%3B%20speak%3A%20initial%3B%20stop-color%3A%20initial%3B%20stop-opacity%3A%20initial%3B%20stroke%3A%20initial%3B%20stroke-dasharray%3A%20initial%3B%20stroke-dashoffset%3A%20initial%3B%20stroke-linecap%3A%20initial%3B%20stroke-linejoin%3A%20initial%3B%20stroke-miterlimit%3A%20initial%3B%20stroke-opacity%3A%20initial%3B%20stroke-width%3A%20initial%3B%20tab-size%3A%20initial%3B%20table-layout%3A%20initial%3B%20text-align%3A%20initial%3B%20text-align-last%3A%20initial%3B%20text-anchor%3A%20initial%3B%20text-combine-upright%3A%20initial%3B%20text-decoration%3A%20initial%3B%20text-decoration-skip-ink%3A%20initial%3B%20text-indent%3A%20initial%3B%20text-overflow%3A%20initial%3B%20text-shadow%3A%20initial%3B%20text-size-adjust%3A%20initial%3B%20text-transform%3A%20initial%3B%20text-underline-offset%3A%20initial%3B%20text-underline-position%3A%20initial%3B%20touch-action%3A%20initial%3B%20transform%3A%20initial%3B%20transform-box%3A%20initial%3B%20transform-origin%3A%20initial%3B%20transform-style%3A%20initial%3B%20transition%3A%20initial%3B%20user-select%3A%20initial%3B%20vector-effect%3A%20initial%3B%20vertical-align%3A%20initial%3B%20visibility%3A%20initial%3B%20-webkit-app-region%3A%20initial%3B%20border-spacing%3A%20initial%3B%20-webkit-border-image%3A%20initial%3B%20-webkit-box-align%3A%20initial%3B%20-webkit-box-decoration-break%3A%20initial%3B%20-webkit-box-direction%3A%20initial%3B%20-webkit-box-flex%3A%20initial%3B%20-webkit-box-ordinal-group%3A%20initial%3B%20-webkit-box-orient%3A%20initial%3B%20-webkit-box-pack%3A%20initial%3B%20-webkit-box-reflect%3A%20initial%3B%20-webkit-highlight%3A%20initial%3B%20-webkit-hyphenate-character%3A%20initial%3B%20-webkit-line-break%3A%20initial%3B%20-webkit-line-clamp%3A%20initial%3B%20-webkit-mask-box-image%3A%20initial%3B%20-webkit-mask%3A%20initial%3B%20-webkit-mask-composite%3A%20initial%3B%20-webkit-perspective-origin-x%3A%20initial%3B%20-webkit-perspective-origin-y%3A%20initial%3B%20-webkit-print-color-adjust%3A%20initial%3B%20-webkit-rtl-ordering%3A%20initial%3B%20-webkit-ruby-position%3A%20initial%3B%20-webkit-tap-highlight-color%3A%20initial%3B%20-webkit-text-combine%3A%20initial%3B%20-webkit-text-decorations-in-effect%3A%20initial%3B%20-webkit-text-emphasis%3A%20initial%3B%20-webkit-text-emphasis-position%3A%20initial%3B%20-webkit-text-fill-color%3A%20initial%3B%20-webkit-text-security%3A%20initial%3B%20-webkit-text-stroke%3A%20initial%3B%20-webkit-transform-origin-x%3A%20initial%3B%20-webkit-transform-origin-y%3A%20initial%3B%20-webkit-transform-origin-z%3A%20initial%3B%20-webkit-user-drag%3A%20initial%3B%20-webkit-user-modify%3A%20initial%3B%20white-space%3A%20initial%3B%20widows%3A%20initial%3B%20width%3A%20initial%3B%20will-change%3A%20initial%3B%20word-break%3A%20initial%3B%20word-spacing%3A%20initial%3B%20x%3A%20initial%3B%20y%3A%20initial%3B%20z-index%3A%20initial%3B%22%3E%26nbsp%3B%3C%2FDIV%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2524001%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2524001%22%20slang%3D%22en-US%22%3E%3CP%3EMS%20screwed%20with%20millions%20of%20users%2C%20condemning%20tens%20of%20millions%20of%20dollars%20of%20equipment%20as%20obsolete%20because%20they%20couldn't%20figure%20out%20how%20to%20create%20secure%20systems.%20Don't%20try%20to%20be%20cute%20and%20say%20%22Ohh%2C%20they'll%20get%20over%20it%20and%20thank%20us%20for%20making%20their%20lives%20more%20secure.%20%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EScrew%20you.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%22By%26nbsp%3B%20asking%20Microsoft%20to%20support%20EOS%20Windows%2C%20people%20are%20effectively%20asking%20us%20to%20support%20an%20OS%20that%20is%20so%20old%20that%20the%20modern%20smartphone%20didn%E2%80%99t%20even%20exist%20yet.%20Not%20counting%20Pocket%20PC%20or%20Windows%20Mobile%20here.%20An%20era%20when%20dial-up%20internet%20was%20still%20%3CA%20href%3D%22https%3A%2F%2Fmoney.cnn.com%2F2000%2F11%2F01%2Ftechnology%2Ffcc_dsl%2Findex.htm%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3Edominant%3C%2FA%3E%20and%20the%20world%20was%20still%20learning%20how%20high-speed%20Internet%20would%20impact%20computer%20security.%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EHow%20many%20zero%20day%20events%20you%20have%20in%20the%20last%20year%3F%20Great%20job.%20Keep%20screwing%20with%20everybody%20til%20you%20%22learn%20how%20high-speed%20Internet%22%20works.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2524578%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2524578%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F965951%22%20target%3D%22_blank%22%3E%40JBJBJB%3C%2FA%3E%26nbsp%3B-%20Topic%20relevance%3F%26nbsp%3B%20Or%20just%20a%20garden-variety%20rant%20intended%20to%20troll%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2525054%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2525054%22%20slang%3D%22en-US%22%3E%3CP%3ELet%20me%20guess....this%20is%20about%20SMB1%2C%20is%20it%20not%3F%20MS%20have%20abandoned%20SMB1%2C%20have%20they%20not%3F%20MS%20have%20screwed%20tens%20of%20thousands%20by%20not%20providing%20some%20alternative%20fix%20for%20SMB1%20functionality%2C%20no%3F%20Millions%20of%20perfectly%20fine%20printers%20and%20other%20devices%20were%20left%20without%20their%20full%20capabilities%20because%20MS%20decided%20the%20customer%20didn't%20matter.%20This%20was%20done%20to%20%22keep%20you%20safe%22.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EPlaying%20dense%20does%20not%20advance%20your%20cause.%20Call%20it%20a%20troll%2C%20call%20it%20a%20rant.%20It's%20fact.%20And%20that%20is%20what%20MS%20cannot%20tolerate.%20And%20as%20it%20so%20happens%2C%20neither%20can%20I%2C%20the%20little%20peon%20who%20dares%20question%20the%20motivation%2C%20or%20rather%20lack%20of%20motivation%2C%20of%20the%20company%20who%20is%20going%20God%20knows%20where.....%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2528851%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2528851%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Ftechcommunity.microsoft.com%2Ft5%2Fuser%2Fviewprofilepage%2Fuser-id%2F965951%22%20target%3D%22_blank%22%3E%40JBJBJB%3C%2FA%3E%26nbsp%3BI%20see...%20so%20let's%20expand%20the%20premise%20of%20your%20rant%20to%20other%20market%20verticals%3A%3C%2FP%3E%0A%3CUL%3E%0A%3CLI%3EShould%20Ford%20still%20be%20supporting%20the%20Model%20T%3F%20Some%20are%20still%20in%20drivable%20condition.%26nbsp%3B%20Is%20Ford%20screwing%20their%20owners%20because%20the%20Model%20T%20won't%20go%2070mph%20on%20the%20highway%2C%20and%20Ford%20won't%20grant%20a%20fix%20to%20make%20it%20go%2070%20%3CSTRONG%3Esafely%3C%2FSTRONG%3E%3F%3C%2FLI%3E%0A%3CLI%3EShould%20the%20audio%2Fvideo%20industry%20still%20be%20supporting%20cassette%20and%20VCR%20tapes%3F%26nbsp%3B%20Aren't%20they%20still%20capable%20of%20storing%20content%3F%26nbsp%3B%20Are%20Walkman%2FVCR%20owners%20getting%20screwed%20because%20no%20new%20content%20is%20being%20released%20in%20either%20form%20factor%3F%3C%2FLI%3E%0A%3CLI%3EBack%20to%20computers-%20should%20owners%20of%20AT%20systems%20with%20a%20286%20processor%20consider%20themselves%20screwed%20because%20they%20can't%20get%20a%20version%20of%20Windows%2010%20to%20install%2C%20much%20less%20to%20install%20from%205%201%2F4%22%20floppy%3F%3C%2FLI%3E%0A%3C%2FUL%3E%0A%3CP%3EChange%20is%20inevitable%3B%20conditions%20and%20requirements%20are%20fluid.%26nbsp%3B%20Sometimes%20individuals%20with%20your%20mindset%20must%20be%20dragged%2C%20kicking%20and%20screaming%2C%20towards%20a%20better%20and%2C%20most%20importantly%2C%20more%20secure%20business%20solution.%26nbsp%3B%20If%20that's%20not%20feasible%2C%20maybe%20this%20isn't%20the%20business%20for%20you-%20check%20to%20see%20if%20your%20local%20library%20is%20hiring.%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EBooks-%20now%20THERE'S%20a%20reliable%20technology.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2730695%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2730695%22%20slang%3D%22en-US%22%3E%3CP%3Egeakin%2C%20your%20condescending%20attitude%20apparently%20will%20carry%20you%20far%20at%20Microsoft%2C%20since%20is%20seems%20to%20reflect%26nbsp%3B%20the%20corporate%20concept%20of%20customer%20service.%20Your%20list%20of%20%22whatabouts%22%20is%20rather%20juvenile.%20Ford%20still%20makes%20automobiles.%20Microsoft%20doesn't%20make%20a%20replacement%20for%20SMB1's%20functionality.%20What%20have%20you%20contributed%20toward%20filling%20this%20gap%3F%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2731102%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2731102%22%20slang%3D%22en-US%22%3E%3CP%3E%22Blame%20your%20developers%20for%20not%20keeping%20up%20with%20SMB%20security%20evolution%2C%20not%20Microsoft.%22%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3ENo.%20I%20blame%20MS%20for%20stupidly%20implementing%20buggy%2C%20risky%20code.%3C%2FP%3E%3CP%3EToday%20is%209%2F7%2F2021.%3C%2FP%3E%3CP%3EThere%20are%20%3CSTRONG%3E1127%3C%2FSTRONG%3E%20CVE%20Records%20that%20match%20Win10%20as%20of%20today.%3C%2FP%3E%3CP%3EThere%20are%20%3CSTRONG%3E1241%3C%2FSTRONG%3E%20CVE%20Records%20that%20match%20Win%207%20as%20of%20today.%3C%2FP%3E%3CP%3EThere%20are%20%3CSTRONG%3E6342%3C%2FSTRONG%3E%20CVE%20Records%20that%20match%20Microsoft%20as%20of%20today.%3C%2FP%3E%3CP%3EA%20favorite..%3C%2FP%3E%3CDIV%3E%3CTABLE%20border%3D%220%22%20width%3D%22100%25%22%20cellspacing%3D%220%22%20cellpadding%3D%220%22%3E%3CTBODY%3E%3CTR%3E%3CTD%3E%3CA%20href%3D%22https%3A%2F%2Fcve.mitre.org%2Fcgi-bin%2Fcvename.cgi%3Fname%3DCVE-2016-3238%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3ECVE-2016-3238%3C%2FA%3E%3C%2FTD%3E%3CTD%3EThe%20Print%20Spooler%20service%20in%20Microsoft%20Windows%20Vista%20SP2%2C%20Windows%20Server%202008%20SP2%20and%20R2%20SP1%2C%20Windows%207%20SP1%2C%20Windows%208.1%2C%20Windows%20Server%202012%20Gold%20and%20R2%2C%20Windows%20RT%208.1%2C%20and%20Windows%2010%20Gold%20and%201511%20allows%20man-in-the-middle%20attackers%20to%20execute%20arbitrary%20code%20by%20providing%20a%20crafted%20print%20driver%20during%20printer%20installation%2C%20aka%20%22Windows%20Print%20Spooler%20Remote%20Code%20Execution%20Vulnerability.%22%3C%2FTD%3E%3C%2FTR%3E%3C%2FTBODY%3E%3C%2FTABLE%3E%3C%2FDIV%3E%3CDIV%20class%3D%22backtop%20noprint%22%3E%26nbsp%3B%3C%2FDIV%3E%3CDIV%20class%3D%22backtop%20noprint%22%3ESince%2020%20friggin'%2016.%20What%20was%20this%20about%20%22keeping%20up%22%3F%3C%2FDIV%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20can%20see%20why%20you%20don't%20want%20anyone%20looking%20at%20MS.%20Place%20the%20blame%20on%20others.%20Great%20strategy.%3C%2FP%3E%3CP%3EI%2C%20and%20as%20many%20associates%20as%20I%20can%20persuade%2C%20have%20left%20MS%20for%20other%20venues.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2731024%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2731024%22%20slang%3D%22en-US%22%3E%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.mosmb.com%2Fhistory-of-smb%2F%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EHistory%20of%20SMB%20-%20MoSMB%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.minitool.com%2Flib%2Fwhat-is-smb.html%22%20target%3D%22_blank%22%20rel%3D%22noopener%20nofollow%20noreferrer%22%3EIntroduction%20to%20SMB%20(Server%20Message%20Block)%20Protocol%20(minitool.com)%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3EPlease%20scan%20through%20each%20non-aligned%2C%203rd-party%20article%20to%20learn%20about%20Microsoft's%20replacement(s)%20for%20SMB1's%20functionality.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2731117%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2731117%22%20slang%3D%22en-US%22%3E%3CP%3EOnly%20now%20do%20I%20realize%20this%20isn't%20about%20SMB1%20anymore.%26nbsp%3B%20My%20apologies.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2732566%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2732566%22%20slang%3D%22en-US%22%3E%3CP%3EThe%20problem%20with%20code%20that%20is%20tens%20of%20millions%20of%20lines%2C%20touched%20by%20thousands%20of%20different%20engineers%20of%20varying%20skill%2C%20and%20is%20decades%20old%2C%20is%20that%20it's%20buggy.%20That's%20true%20for%20all%20operating%20systems%2C%20not%20just%20Windows.%20I'll%20use%20CVE's%20as%20an%20example%20since%20that%20seems%20to%20be%20your%20preferred%20metric.%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3E%3CA%20href%3D%22https%3A%2F%2Fwww.cvedetails.com%2Ftop-50-products.php%22%20target%3D%22_blank%22%20rel%3D%22nofollow%20noopener%20noreferrer%22%3ETop%2050%20products%20having%20highest%20number%20of%20cve%20security%20vulnerabilities%20(cvedetails.com)%3C%2FA%3E%3C%2FP%3E%0A%3CP%3E%26nbsp%3B%3C%2FP%3E%0A%3CP%3ELook%20by%20year%20and%20you'll%20see%20that%20sometimes%20Windows%20is%20near%20the%20top%2C%20sometime%20a%20Linux%20distro%20is%20at%20the%20top%2C%20sometimes%20Android%20is%20at%20the%20top.%20Sometimes%20a%20browser%20is%20at%20the%20top.%20Which%20makes%20your%20argument%20selective%20and%20poor%20at%20best%2C%20and%20troll%20bait%20at%20worst.%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-SUB%20id%3D%22lingo-sub-2732575%22%20slang%3D%22en-US%22%3ERe%3A%20SMB%20is%20Dead%2C%20Long%20Live%20SMB!%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2732575%22%20slang%3D%22en-US%22%3E%3CP%3EClosing%20comments%20to%20prevent%20further%20trolling.%3C%2FP%3E%3C%2FLINGO-BODY%3E
Version history
Last update:
‎Feb 26 2020 09:22 AM
Updated by:
www.000webhost.com