Link to home
Start Free TrialLog in
Avatar of pramod1
pramod1Flag for United States of America

asked on

active directory, SMBversion 1.0

how can we use new CMI session to enable logging for SMBversion 1.0 on all on premise  domain controllers?

Avatar of Jackie Man
Jackie Man
Flag of Hong Kong image

What do you mean by CMI session?
CIM, I guess ...

But what would there be to log? Haven't you disabled SMBv1 - as you are advised to do?
Avatar of pramod1

ASKER

I need to check first who all are using

Can you please share the command
Where I can enable logging for sometime across all domains
Could you please rephrase your question? I don't understand your wording - or rather lack of.
Avatar of pramod1

ASKER

i want to enable logging for SMB1 on all ON PREMISE  domain controllers and member servers

across americas, Europe and asia pacific domains.



as i want to find users, IP addresses  who are using SMB1 .  and then tell those users to not to use smbversion1 and then will  disable smb1

i can run this command Set-SmbServerConfiguration -AuditSmb1Access $true

The bad news its not accepting a remote computer name, so you'd use New-CIMSession ... which might not work if not configured properly.

so i was looking for proper CMI session to configure the command
ASKER CERTIFIED SOLUTION
Avatar of Gustav Brock
Gustav Brock
Flag of Denmark image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial