asked on active directory, SMBversion 1.0
how can we use new CMI session to enable logging for SMBversion 1.0 on all on premise domain controllers?
Active Directory* SMBv1Windows Server 2016Windows 10Azure
Last Comment
Philip Elder
What do you mean by CMI session?
CIM, I guess ...
But what would there be to log? Haven't you disabled SMBv1 - as you are advised to do?
But what would there be to log? Haven't you disabled SMBv1 - as you are advised to do?
ASKER
I need to check first who all are using
Can you please share the command
Where I can enable logging for sometime across all domains
Can you please share the command
Where I can enable logging for sometime across all domains
Could you please rephrase your question? I don't understand your wording - or rather lack of.
ASKER
i want to enable logging for SMB1 on all ON PREMISE domain controllers and member servers
across americas, Europe and asia pacific domains.
as i want to find users, IP addresses who are using SMB1 . and then tell those users to not to use smbversion1 and then will disable smb1
i can run this command Set-SmbServerConfiguration -AuditSmb1Access $true
The bad news its not accepting a remote computer name, so you'd use New-CIMSession ... which might not work if not configured properly.
so i was looking for proper CMI session to configure the command
across americas, Europe and asia pacific domains.
as i want to find users, IP addresses who are using SMB1 . and then tell those users to not to use smbversion1 and then will disable smb1
i can run this command Set-SmbServerConfiguration -AuditSmb1Access $true
The bad news its not accepting a remote computer name, so you'd use New-CIMSession ... which might not work if not configured properly.
so i was looking for proper CMI session to configure the command
ASKER CERTIFIED SOLUTION
THIS SOLUTION ONLY AVAILABLE TO MEMBERS.
View this solution by signing up for a free trial.
Members can start a 7-Day free trial and enjoy unlimited access to the platform.
The PowerShell steps are here:
https://docs.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3
This is a script that can be used with a list or perhaps Get-ADObject on an OU of servers or clients:
https://www.powershellgallery.com/packages/MrAToolbox/1.0.1/Content/Get-SMBStatus.ps1
https://docs.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3
This is a script that can be used with a list or perhaps Get-ADObject on an OU of servers or clients:
https://www.powershellgallery.com/packages/MrAToolbox/1.0.1/Content/Get-SMBStatus.ps1