Afiniti Exchange AD
asked on
enable SMBv3.1.1 encryption
How can I enable SMBv3.1.1 encryption in latest OSs i.e. Windows Server 2016 etc. Wherever possible having backward compatibility with older OSs supporting only SMBv2 using windows group policy.
ASKER
SMBv 3 is already enabled, what i need is to enable SMBv3.1.1 encryption in latest OSs i.e. Windows Server 2016 etc. using GPO.
OK, you'll need to probably get some sort of ADMT for group policy in order to get the option, either that or upgrade your domain functional level to 2016 in order to get the option in group policy.
SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER CERTIFIED SOLUTION
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
ASKER
Hi Alex,
Can we revert the domain functional level back to current level later.
Can we revert the domain functional level back to current level later.
Did you pick the wrong thread?
I suspect that the OP was responding to Alex Green's comment where he stated that the OP may need to raise the functional level to get GPO options.
The comment was not accurate, but I can see why the OP would ask what they did given the plethora of advice here. :/
The comment was not accurate, but I can see why the OP would ask what they did given the plethora of advice here. :/
@Afinity E., why did your feedback stop?
I consider this solved already. Cliff pointed to server manager and I gave you the commands to tune it to your liking and to verify it.
Cliff should add how he would fulfill backwards compatibility in server manager if possible.
I consider this solved already. Cliff pointed to server manager and I gave you the commands to tune it to your liking and to verify it.
Cliff should add how he would fulfill backwards compatibility in server manager if possible.
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.
I have recommended this question be closed as follows:
Split:
-- 'McKnife' (https:#a42678381)
-- 'Cliff Galiher' (https:#a42678315)
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
seth2740
Experts-Exchange Cleanup Volunteer
I have recommended this question be closed as follows:
Split:
-- 'McKnife' (https:#a42678381)
-- 'Cliff Galiher' (https:#a42678315)
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.
seth2740
Experts-Exchange Cleanup Volunteer
https://support.microsoft.com/en-gb/help/2696547/how-to-detect-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and
Full guide there :-)
If you need further assistance please post back and I'll take another crack at it for you. This should be sufficient.