Hi Forum,
looking for help, I try now for days and this drives me crazy... after I read tons of "solves".
We have a Machine with Windows CE, connected to our domainnetwork (DNS register seem good: machine.domain.tld) and received an IP, Gateway, DNS.
Internet work, ping to the PC(s) work (ping pc AND ping pc.domain.tld works!)
than
we have a PC with Windows 10 on it:
SMB1 is active; Client for networks and sharing is enabled in NIC interface.
Have set on the PC in the secpol.msc => only NTLM answers
Information: this Windows 10 is hardened by BSI GPO (after apply nothing works so far :()
Since I don't know exactly what was changed (yea, this was a mistake ...) but after the policy apply, the connections has gone.
Im trying for days now, to set the Registy back without success. Somehow other machines (Win XP) can connect, it asking for credentials.
Firewall is off.
If I use "net use Host \PC\share I get an error 53 on the machine.
On the machine/owner is set to username, password and domain
PC is in domain.
What can I do?
The machine can ping all devices in the network but tells me 53 if I want to map a share.
Is there something I can read on the PC inside the eventvwr? I don't see any connections (smb audit is on).
Do I have to change something on the 2 DCs?
Please, help me. How can I fix this? Can you tell me all depencies about SMB Sharing?
I can mount the share on a other Win10 without any problems, even is we are in a other VLAN.
I really appreciate any help and I will support as much as I can with Screenshots or requested doings.
Sorry for my bad english. Let me know, if I forget something.
Thank you very very much.
Best regards,
pixl
![PS C:\WINDOWS\system32> Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol
FeatureName : SMB1Protocol
DisplayName : Unterstützung für die SMB 1.0/CIFS-Dateifreigabe
Description : Unterstützung für das SMB 1.0/CIFS-Protokoll zur Dateifreigabe und das Computerbrowserprotokoll.
RestartRequired : Possible
State : Enabled
CustomProperties :
ServerComponent\Description : Unterstützung für das SMB 1.0/CIFS-Protokoll zur Dateifreigabe und
das Computerbrowserprotokoll.
ServerComponent\DisplayName : Unterstützung für die SMB 1.0/CIFS-Dateifreigabe
ServerComponent\Id : 487
ServerComponent\Type : Feature
ServerComponent\UniqueName : FS-SMB1
ServerComponent\Deploys\Update\Name : SMB1Protocol][2]
PS C:\WINDOWS\system32> Get-SmbServerConfiguration | Select EnableSMB1Protocol
EnableSMB1Protocol
------------------
True
PS C:\WINDOWS\system32> Get-SmbServerConfiguration | Select EnableSMB2Protocol
EnableSMB2Protocol
------------------
True
EnableAuthenticateUserSharing : 1
NullSessionPipes : {}
ServiceDll : C:\WINDOWS\system32\srvsvc.dll
ServiceDllUnloadOnStop : 1![225221-lanmanserver.png][3]
EnableForcedLogoff : 0
EnableSecuritySignature : 1
RequireSecuritySignature : 0
RestrictNullSessAccess : 0
SrvComment :
SMB1 : 1
autodisconnect : 4294967295
nullsessionshares : {}
smbservernamehardeninglevel : 0
AuditSmb1Access : 1
DisableMultiChannel : 0
SMB2 : 1
RejectUnencryptedAccess : 0
Guid : {147, 167, 223, 198...}
PSPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service
s\LanmanServer\Parameters
PSParentPath : Microsoft.PowerShell.Core\Registry::HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Service
s\LanmanServer
PSChildName : Parameters
PSProvider : Microsoft.PowerShell.Core\Registry
PS C:\WINDOWS\system32> sc.exe qc lanmanworkstation
[SC] QueryServiceConfig ERFOLG
SERVICE_NAME: lanmanworkstation
TYPE : 20 WIN32_SHARE_PROCESS
START_TYPE : 2 AUTO_START
ERROR_CONTROL : 1 NORMAL
BINARY_PATH_NAME : C:\WINDOWS\System32\svchost.exe -k NetworkService -p
LOAD_ORDER_GROUP : NetworkProvider
TAG : 0
DISPLAY_NAME : Arbeitsstationsdienst
DEPENDENCIES : bowser
: mrxsmb10
: mrxsmb20
: nsi
SERVICE_START_NAME : NT AUTHORITY\NetworkService