Shulou(Shulou.com)11/24 Report--

CTOnews.com More than a year ago, Microsoft announced that it would no longer provide Server Message Block (SMB1) to Windows 11 Home because it was a very old network security protocol that is no longer secure, but SMB still exists in Windows 11.

In fact, the company made SMB signing the default behavior for Windows Insider Enterprise earlier this month, but that move seems to have led to a lot of mistakes. Microsoft is aware of this problem, which in some cases SMB will show authentication failure, so Microsoft now provides a solution to this problem.

Microsoft recommends that you immediately stop using guest credentials to access your third-party devices and warns that continuing this behavior puts your data at risk because anyone can use this technology to obtain your data without leaving a trace.

Microsoft stressed that device manufacturers often enable guest access by default because they don't want to deal with complex security issues like customers. For occasional reasons, it is recommended that you consult the vendor documentation to enable password-based authentication, or retire the product altogether if not supported.

However, if your organization is unable to disable SMB customer access, the only option is to disable SMB signing, which Microsoft does not recommend because of the negative impact it has on your company's security. Now Microsoft has provided you with three ways to disable SMB signing, CTOnews.com translation is as follows:

Local Group Policy Open the Local Group Policy Editor (gpedit.msc) on your Windows device.

In the console, select Computer Configuration> Windows Settings> Security Settings> Local Policies> Security Options.

Double-click Microsoft Web Client: Digitally sign communications (always).

Select Disable> OK.

Command line Open PowerShell with administrator privileges.

Run:

Set-SmbClientConfiguration -RequireSecuritySignature $false Domain-based Group Policy Find the security policy that applies this setting to your Windows device (You can use GPRESULT /H on the client to generate a set of resulting policy reports to show which Group Policy requires SMB signatures.)

In GPMC.MSC, change Computer Configuration> Policy> Windows Settings> Security Settings> Local Policy> Security Options.

Set Microsoft network client: Digital sign communications (always) to Disabled.

Apply the updated policy to Windows devices that require guest access through SMB.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.