disable smb on sccm servers

Question

Hi,

security has run an scan on sccm server and found that smb is open for any client to talk to sccm server and now they have ask me to disable the smb on all sccm servers

I cant seem to find any info that this will cause any issue with any servers or clients.

Can someone please confirm if anything will be stop if I run below command on all sccm server (WSUS, DP, MP, Site Server, Reporting)

Set-SmbServerConfiguration -EnableSMB2Protocol $false

Answer 1

Hi @lalajee

SMB is required for SCCM. You closing ports on your SCCM servers for SMB will most likely cause issues.

https://learn.microsoft.com/en-us/mem/configmgr/core/plan-design/hierarchy/ports

https://learn.microsoft.com/en-us/mem/configmgr/core/clients/deploy/windows-firewall-and-port-settings-for-clients

----------------------------------

If this is helpful please accept answer.