Link to home
Start Free TrialLog in
Avatar of Afiniti Exchange AD
Afiniti Exchange AD

asked on

enable SMBv3.1.1 encryption

How can I enable SMBv3.1.1 encryption in latest OSs i.e. Windows Server 2016 etc. Wherever possible having backward compatibility with older OSs supporting only SMBv2 using windows group policy.
Avatar of Alex
Alex
Flag of United Kingdom of Great Britain and Northern Ireland image

Morning

https://support.microsoft.com/en-gb/help/2696547/how-to-detect-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and

Full guide there :-)

If you need further assistance please post back and I'll take another crack at it for you. This should be sufficient.
Avatar of Afiniti Exchange AD
Afiniti Exchange AD

ASKER

SMBv 3 is already enabled, what i need is to enable SMBv3.1.1 encryption in latest OSs i.e. Windows Server 2016 etc. using GPO.
OK, you'll need to probably get some sort of ADMT for group policy in order to get the option, either that or upgrade your domain functional level to 2016  in order to get the option in group policy.
SOLUTION
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
ASKER CERTIFIED SOLUTION
Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
Hi Alex,
Can we revert the domain functional level back to current level later.
Did you pick the wrong thread?
I suspect that the OP was responding to Alex Green's comment where he stated that the OP may need to raise the functional level to get GPO options.

The comment was not accurate, but I can see why the OP would ask what they did given the plethora of advice here.  :/
@Afinity E., why did your feedback stop?
I consider this solved already. Cliff pointed to server manager and I gave you the commands to tune it to your liking and to verify it.
Cliff should add how he would fulfill backwards compatibility in server manager if possible.
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Split:
-- 'McKnife' (https:#a42678381)
-- 'Cliff Galiher' (https:#a42678315)


If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

seth2740
Experts-Exchange Cleanup Volunteer