Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizens for their logical, giggling Hongshi, soft media users 1520111, Ji Yin Ke Yi, soft media new friends 2010825, EdgeOS, Lantian, South China Daniel Wu, Dest1n, Terrence for the delivery of clues! CTOnews.com Sept. 14, Microsoft today announced the release of Windows 11 Insider Preview Build 25951 to Canary Channel, as well as the latest version of the ISO image file.

What's new in Win11 Build 25951: SMB NTLM Blocking starts with Build 25951, and SMB clients will support NTLM that blocks remote outbound connections. Windows SPNEGO negotiates Kerberos, NTLM, and other mechanisms with the target server to determine which security packages are supported.

CTOnews.com Note: the NTLM here refers to all versions of the LAN Manager security package: LM, NTLM, and NTLMv2.

Thanks to this, IT administrators can proactively prevent Windows from providing NTLM through SMB. As a result, even if an attacker succeeds in deceiving a user or application into sending a NTLM response to a malicious server, it will not receive any NTLM data, nor will it be able to perform brute force cracking, password cracking, or password passing. This provides a higher level of protection for enterprises without completely disabling the NTLM feature in the operating system.

Administrators can configure this option using Group Policy and PowerShell. You can also use NET USE and PowerShell to block NTLM used in SMB connections as needed.

SMB Dialect Management: starting with Build 25951, the SMB server will support control that it will negotiate the desired SMB 2 or SMB 3 dialects, thus changing the traditional behavior that Windows SMB always negotiates the highest matching server dialects from SMB 2.0.2 to 3.1.1 clients.

In fact, Microsoft has added support for controlling SMB client dialects since Windows 10, but has not yet added support for server dialects.

With this new option, administrators can remove the old SMB protocol from the organization, thereby preventing older, less secure, and less capable Windows devices from connecting to third parties.

Administrators can configure this option using Group Policy and PowerShell. Now, both the SMB client and the server include full administrative support (previously the client only supported manual registry editing).

Changes and improvements to the lock screen adjust the network pop-up interface on the lock screen interface to better match the quick-set network pop-up interface in the system tray on the taskbar.

Some popular games with known problems may not work properly.

[new] is investigating reports that cannot be accessed by the print queue.

Play Windows 11x10, Windows Server system disk mirror four axes: after downloading ISO, you can use the softmedia file master in the soft media Rubik's cube (click to visit the official website) to obtain SHA1, MD5, CRC and other check values to ensure that the original image is downloaded and does not give Trojans a chance.

The soft media USB disk boot in the soft media Rubik's cube (click here to download) can make the ISO into a startup USB disk for installation, which not only saves the trouble of engraving the disk, but also can easily share it with your friends.

The soft media virtual optical drive in the soft media Rubik's cube (click here to download), you can directly virtualize the ISO image into an optical drive, which is convenient for you to run and install directly.

Soft media Rubik's cube in the soft media hard disk installation (click here to download), you can easily install Win7, Win8, Win8.1, Win10, Win11 and other single multi-system, one button to complete, only 30 seconds!

How to download Windows ISO preview image to download Windows ISO image, please follow these steps.

Open the image download page for members of Microsoft Windows Preview experience.

Find Select version.

Select the version you want, such as "Windows 11 Insider Preview (Canary Channel)-Build 25951".

Confirm and select the language as simplified Chinese (make sure to improve the language given in the Settings application > language).

Confirm and get your download address (download address is valid, please click download as soon as possible).

CTOnews.com warns that if you follow the steps above correctly, the ISO image will start downloading in the browser, but the link will expire in 24 hours.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.