Shulou(Shulou.com)11/24 Report--

Thanks to CTOnews.com netizens Ji Yin Ke, EdgeOS, soft Media New Friends 2010825, Terrence, my Love 317 for the delivery of clues! CTOnews.com, November 9, Microsoft today released a preview update of Win11 Build 25992 for Windows Insider project members of Canary Channel. The most noteworthy change in this update is to adjust the SMB function and support the creation of compressed files in 7-zip and TAR formats.

CTOnews.com attached the update of Win11 Build 25992 preview as follows:

Adjust SMB functionality: starting with Build 25992 preview, Microsoft began to adjust the server message block (SMB) protocol.

SMB firewall rule tuning: creating SMB shares adjusts the long-term default behavior of Windows Defender firewalls.

In previous versions, creating a SMB share automatically configured the firewall to enable the File and Printer sharing rule for the specified firewall profile.

From this release, Win11 will be configured to enable a new "File and Printer sharing (restricted)" group, no longer inbound NetBIOS ports 137139.

We plan to update this rule in the future to remove both inbound ICMP, LLMNR, and daemon service ports and limit them to only the ports required for SMB sharing.

This change enforces a higher degree of network security defaults and makes SMB firewall rules more similar to Windows Server File Server role behavior. If necessary, the administrator can still configure the File and Printer sharing group and modify this new fire wall group.

SMB NTLM blocking exception list Microsoft in Win11 Build 25951 preview, the SMB client will support NTLM that blocks remote outbound connections. Windows SPNEGO negotiates Kerberos, NTLM, and other mechanisms with the target server to determine which security packages are supported.

CTOnews.com Note: the NTLM here refers to all versions of the LAN Manager security package: LM, NTLM, and NTLMv2.

Thanks to this, IT administrators can proactively prevent Windows from providing NTLM through SMB. As a result, even if an attacker succeeds in deceiving a user or application into sending a NTLM response to a malicious server, it will not receive any NTLM data, nor will it be able to perform brute force cracking, password cracking, or password passing. This provides a higher level of protection for enterprises without completely disabling the NTLM feature in the operating system.

Administrators can configure this option using Group Policy and PowerShell. You can also use NET USE and PowerShell to block NTLM used in SMB connections as needed.

SMB standby client and server ports: previously, SMB only supported TCP / 445, QUIC / 443, and RDMA iWARP / 5445. The SMB client now supports an alternate network port that uses hard-coded defaults to connect to the SMB server through TCP, QUIC, or RDMA.

In addition, the SMB over QUIC server in Windows Server supports the configuration of different ports for different terminals. Windows Server does not support the configuration of standby SMB server TCP ports, but third parties such as Samba do.

Users can specify alternate SMB client ports using the NET USE command and New-SmbMapping PowerShell cmdlet, or they can disable this feature entirely using Group Policy.

QUIC-based SMB client access control certificate change: the SMB feature based on QUIC client access control, first announced in Windows 11 Insider Preview Build 25977, now supports the use of certificates with alternate names for consumers, not just individual consumers.

This means that the client access control feature now supports the use of Microsoft AD certificate authorities and multiple endpoint names, just like the currently released QUIC-based version of SMB. You can now evaluate this feature using the recommended options without requiring a self-signed test certificate.

Improving and optimizing [File Manager] significantly improves the performance of opening large .zip files in File Manager

In addition to ZIP file support, support for adding and creating 7-zip and TAR compressed files.

[Snap layout] displays recommendations in the Snap layout to help users adjust the layout of desktop windows faster and more reasonably.

Fix known issues fixed problems that caused blank options to appear on the Personalization and Privacy and Security settings pages, which, if clicked, caused Settings to crash.

Fixed an issue that caused right-click menus to be drawn off-screen when using touch or pen transfer on the side of the desktop.

Fixed an issue where the setup Home Page might display an error prompt to log in to the Microsoft account.

Fixed crash of quick setup and failure of WIN + An in the previous preview

Fixed an issue that caused the taskbar icon to disappear after switching desktops.

Welcome to subscribe "Shulou Technology Information " to get latest news, interesting things and hot topics in the IT industry, and controls the hottest and latest Internet news, technology news and IT industry trends.