AD Issue ... Windows 10 or the Domain?
-
BTW:
Turns out the issue was a 1803 thing.
Maybe it is just my environment, but have never had to enable SMB1 before.
Though I did have a couple errors in DNS that I also fixed while I was in there.
And of course the errors above that I posted. Though everything is working perfectly.
-
@brrabill said in AD Issue ... Windows 10 or the Domain?:
BTW:
Turns out the issue was a 1803 thing.
Maybe it is just my environment, but have never had to enable SMB1 before.
Though I did have a couple errors in DNS that I also fixed while I was in there.
And of course the errors above that I posted. Though everything is working perfectly.
SMBv1 Is recently just disabled on all new windows systems
-
@jaredbusch said in AD Issue ... Windows 10 or the Domain?:
@brrabill said in AD Issue ... Windows 10 or the Domain?:
BTW:
Turns out the issue was a 1803 thing.
Maybe it is just my environment, but have never had to enable SMB1 before.
Though I did have a couple errors in DNS that I also fixed while I was in there.
And of course the errors above that I posted. Though everything is working perfectly.
SMBv1 Is recently just disabled on all new windows systems
Probably why this is the first time I have seen it.
And assuming any upgrades would just keep it.
-
BTW: those DNS errors were caused by using an older version of DCDIAG, apparently.
Installed newest version and it works like a charm.
-
@jaredbusch I've heard this before, but has anyone actually checked to see if it is disabled.
On 2016 that we just recently deployed it is active by default when configuring it as a file server.
-
I had to go into the Features section of the 1803 client (fresh install) and enable it.
-
It also warned that the share (when trying to connect to the domain) was insecure and SMB1.
-
@dustinb3403 said in AD Issue ... Windows 10 or the Domain?:
@jaredbusch I've heard this before, but has anyone actually checked to see if it is disabled.
On 2016 that we just recently deployed it is active by default when configuring it as a file server.
It is disabled by default on RS3 of Server 2016 onwards.
-
@brrabill said in AD Issue ... Windows 10 or the Domain?:
I had to go into the Features section of the 1803 client (fresh install) and enable it.
Yeah, makes sense since Server 2003 still uses SMBv1.
-
I hate to be rude, but using 2003 as DCs is asking the company and IT to bend over and just take it. I would seriously question IT and business leadership for making this decision.
EOL was over 4 years ago!!!!!! seroiously WTF is your company doing? and like @JaredBusch said at least dont use it for DCs?
-
@irj said in AD Issue ... Windows 10 or the Domain?:
I hate to be rude, but using 2003 as DCs is asking the company and IT to bend over and just take it. I would seriously questions IT and business leadership for making this decision.
I am not sure if the they have but @BRRABill will explain better. Sometimes reality is different than what we feel needs to be done.
-
@dbeato said in AD Issue ... Windows 10 or the Domain?:
@irj said in AD Issue ... Windows 10 or the Domain?:
I hate to be rude, but using 2003 as DCs is asking the company and IT to bend over and just take it. I would seriously questions IT and business leadership for making this decision.
I am not sure if the they have but @BRRABill will explain better. Sometimes reality is different than what we feel needs to be done.
I disagree. The only way it makes any sense to run a product that is 4 years EOL as your DC is if you are paying for support for Microsoft. Anything else is reckless.
-
@irj said in AD Issue ... Windows 10 or the Domain?:
@dbeato said in AD Issue ... Windows 10 or the Domain?:
@irj said in AD Issue ... Windows 10 or the Domain?:
I hate to be rude, but using 2003 as DCs is asking the company and IT to bend over and just take it. I would seriously questions IT and business leadership for making this decision.
I am not sure if the they have but @BRRABill will explain better. Sometimes reality is different than what we feel needs to be done.
I disagree. The only way it makes any sense to run a product that is 4 years EOL as your DC is if you are paying for support for Microsoft. Anything else is reckless.
I understand that Server 2003 should be gone and I don’t have it in any of my networks or costumers. But I knkw plenty of government and organizations that have not fully replaced server 2003 for various reasons. All that with IT Department telling them to upgrade... and yeah you can question leadership.
-
@irj said in AD Issue ... Windows 10 or the Domain?:
@dbeato said in AD Issue ... Windows 10 or the Domain?:
@irj said in AD Issue ... Windows 10 or the Domain?:
I hate to be rude, but using 2003 as DCs is asking the company and IT to bend over and just take it. I would seriously questions IT and business leadership for making this decision.
I am not sure if the they have but @BRRABill will explain better. Sometimes reality is different than what we feel needs to be done.
I disagree. The only way it makes any sense to run a product that is 4 years EOL as your DC is if you are paying for support for Microsoft. Anything else is reckless.
Even then, I'd say anything that depends on MS support is reckless. MS Support doesn't qualify as "support" by any normal standard.
-
@dbeato said in AD Issue ... Windows 10 or the Domain?:
@irj said in AD Issue ... Windows 10 or the Domain?:
@dbeato said in AD Issue ... Windows 10 or the Domain?:
@irj said in AD Issue ... Windows 10 or the Domain?:
I hate to be rude, but using 2003 as DCs is asking the company and IT to bend over and just take it. I would seriously questions IT and business leadership for making this decision.
I am not sure if the they have but @BRRABill will explain better. Sometimes reality is different than what we feel needs to be done.
I disagree. The only way it makes any sense to run a product that is 4 years EOL as your DC is if you are paying for support for Microsoft. Anything else is reckless.
I understand that Server 2003 should be gone and I don’t have it in any of my networks or costumers. But I knkw plenty of government and organizations that have not fully replaced server 2003 for various reasons. All that with IT Department telling them to upgrade... and yeah you can question leadership.
But they ARE reckless and unprofessional. Just because reckless people do bad things doesn't make it any better. Its' not questioning the leadership, it's outright bad leadership.
-
Yeah the IT guy at this place is a real jackhole, let me tell you...
-
What's keeping the company from at least migrating the domain controllers? That's actually one of the easier services to migrate.
I've sometimes seen 2003 with legacy applications that management does not want to change for whatever reason. Just not with DCs.
