[Samba] Fwd: Cannot connect to Samba share (4.1.11) from Windows 10

[Denis BUCHER]

Dear Rwoland,

I don't like to reply my own emails, but...

Le 2017-10-18 16:46, Denis BUCHER a écrit :
> Le 2017-10-17 20:16, Rowland Penny via samba a écrit :
>> On Tue, 17 Oct 2017 19:31:17 +0200
>> "Denis BUCHER via samba" <samba at lists.samba.org> wrote:
>>> Le 07.09.2015 à 15:52, soonerdave a écrit :
>>> > Windows 10 will try to negotiate SMB3_11, which Samba4 doesn't yet
>>> > support except in the current 4.3 release candidate. I suspect for
>>> > now disabling SMB2/3 on the Windows 10 client is your best, if not
>>> > ideal, option.
>>> >
>>> > Instructions for doing.this can be found
>>> > here: https://support.microsoft.com/en-us/kb/2696547
>>> 
>>> I have the same problem. (Samba 4.1.11 and Windows 10 not able to
>>> join domain because our best protocol is SMB3_00)
>>> 
>>> But to be sure I understand correctly :
>>> 
>>>   * It is possible to modify Windows 10 to use older protocols ?
>>>   * If yes, we should disable SMB3 on Windows 10 ?
>>>   * But if I read the Microsoft document above I don't understand 
>>> what
>>>     exactly I should do to disable SMB3 ?
>> 
>> You would be better to update Samba, 4.1.x is EOL and not supported by
>> Samba.
> 
> Yes, that would be a the mid-term project (2-3 months), but on a very
> short term (a matter of days) we need to have only 2 Windows 10
> machines connected to our Samba. All other 80 computers are Windows 7,
> and it's working very well. Sincerely we are very happy with the
> current system and will go to a brand new server (new Debian with
> latest Samba) only when migrating to Windows 10.
> 
>> You probably could disable SMB3 on Win10, but you would then be 
>> running
>> an insecure system.
> 
> That's not a problem to us, as it is a 100% internal only network.
> 
> Really that's what we really need, I just don't know how to do that on
> Windows 10 ;-)
> 
>> What sort of domain are you running ?
> 
> "classic primary domain controller" with roaming profiles.
> 
> Otherwise said, your suggestions are the good ones (install a newer
> Samba server and so on) but for now the best for us would be to
> understand how to configure Windows 10 not to use SMB3 protocol ?
> 
> I know everything is explained in
> https://support.microsoft.com/en-us/kb/2696547 but I didn't understand
> what to do exactly (sorry ! ;-)

Meanwhile I found this link that seems to answer my question :

https://it.awroblew.biz/windows-10-and-problems-accessing-smb-shares/

It says :

> To disable SMBv2 and SMBv3 on the SMB client, run the following 
> commands:
> sc.exe config lanmanworkstation depend= bowser/mrxsmb10/nsi
> sc.exe config mrxsmb20 start= disabled
> 
> To enable SMBv1 on the SMB client, run the following commands:
> sc.exe config lanmanworkstation depend= bowser/mrxsmb10/mrxsmb20/nsi
> sc.exe config mrxsmb10 start= auto

Denis