Share via

Disabling SMBv1 on Windows 2016

rr-4098 1,321 Reputation points
2024-06-19T19:01:49.03+00:00

We have a 2016 DC that we need to disabled SMBv1 on. When following the article below whether I remove the feature via the GUI or disabled it using Powershell, I am not able to save any GP changes. I get access denied. As soon as I enable SMBv1 again everything is back to normal.

Thoughts???

https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server

Windows Server 2016
Windows Server 2016
A Microsoft server operating system that supports enterprise-level management updated to data storage.
2,422 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Karlie Weng 15,916 Reputation points Microsoft Vendor
    2024-06-20T02:05:37.4133333+00:00

    Hello,

    Here are a few things to consider:

    1. Check SMB Protocol Compatibility:

    Confirm that SMB2 or SMB3 is enabled and functioning correctly on both the server and all client systems.

    2. Validate Share Accessibility:

    Attempt to manually access the SYSVOL and NETLOGON shares from a client machine using the UNC paths (\servername\SYSVOL, \servername\NETLOGON). This step helps identify any basic access issues that might disrupt domain functionality.

    SYSVOL contains crucial GPOs that must be distributed across all domain controllers for consistent policy application. Any disruption to SYSVOL access can lead to GPO application failures.

    Verify that SYSVOL replication is occurring seamlessly among all your domain controllers. Utilize tools such as the dfsrdiag command-line utility or the DFS Management console to inspect replication health.

    3.Review Event Viewer Logs:

    Inspect the Event Viewer for signs of trouble, focusing on the System and Application logs. Specifically, look out for error messages related to SMB, DFS Replication (Event ID 1006 may indicate replication problems), Group Policy (Event ID 4016 might suggest GPO processing errors).

    4.Confirm Service Status:

    Ensure that essential services tied to Group Policy and file sharing are operational without errors. Key services include "File and Storage Services", "DFS Replication", "Group Policy Client", and "Remote Procedure Call (RPC)".

    If the Answer is helpful, please click "Accept Answer" and upvote it.