Windows 2019 Domain Controller- SMBv1 disabled

Aamir Masthan 41 Reputation points
2020-08-17T13:52:13.333+00:00

Hello All,

We are in process of upgrade of our Domain Controller from windows 2012 to windows 2019. And as far i know SMBv1 protocol will be disabled by default
So by default winXP & win2003 will not able to join to Domain
now can any one tell if the uses continue to use winxp or window 2003 member to login , files share etc?

Regards
Aamir Masthan

Windows for business | Windows Client for IT Pros | Directory services | Active Directory

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Thameur-BOURBITA 36,536 Reputation points Moderator
    2020-08-21T11:24:30.56+00:00

    Hi

    Keeping a windows 2003 and Windows XP in your environment and upgrade your domain controllers to Windows 2019 , it's not a good idea. Because Windows XP and Windows 2003 are not supported to communicate with a domain controller on Windows 2019.

    It's time to think to upgrade all unsupported operating system as Windows 2003 and WIndows XP to supported version.

    Please don't forget to mark this reply as answer if it help you to fix your issue

    Was this answer helpful?

  2. Falcon IT Services 226 Reputation points
    2020-08-17T14:56:21.257+00:00

    Hi Again

    According to this article, XP will not work on server 2019. You can try a lower functionality level but you are likely on your own as far as testing and figuring it out, since XP is long out of support.

    https://social.microsoft.com/Forums/Azure/en-US/05b74c9c-7a80-4a03-8136-455cba9f95cc/windows-xp-and-active-directory-2019?forum=ws2019

    Was this answer helpful?

    0 comments
  3. Falcon IT Services 226 Reputation points
    2020-08-17T14:50:27.01+00:00

    Hello Aamir,

    SMB is a protocol for allowing file shares/transfers in a Windows environment (shared files & folders) it has nothing to do with joining a domain.

    Your domain functional level will need to be raised to server 2008R2 - 2012R2, in order to get 2003 and 2019 DC's working together. This may work, but will be unsupported due to 2003 being out of support.

    With that said, Windows XP is also out of support. You might be able to get it to join by using a lower domain functionality level, but that does not change the fact that it is still unsupported, and will present a broad range of problems, including security issues.

    Regards,

    Miguel Fra
    www.falconitservices.com

    Was this answer helpful?

  4. SChalakov 10,941 Reputation points MVP Volunteer Moderator
    2020-08-17T14:44:08.15+00:00

    Hi Aaamir,
    can you please be more specific with the question "now can any one tell if the uses continue to use winxp or window 2003 member to login , files share etc?" I think I am missing something here.
    In General you can enable SMBv1 (although not recommended) and ensure the backwards compatibility, but you need to consider one more thing - enabling the support for older encryption algorithms like RC4. You can refer to the following MS Docs article for more detail on the Kerberos encryption protocol compatibility:

    network-security-configure-encryption-types-allowed-for-kerberos

    Regards

    =========================================================

    Please don't forget to "Accept Answer" and upvote if the response helped you.
    Stoyan

    Was this answer helpful?

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.