Windows 10: Detail questions about NTLM and SMB

These questions concerns Windows in general, not only Windows 10.


What combinations of auth (LM, Net-NTLMv1, Net-NTLMv2, Kerberos) and SMB (1,2,3) are possible? All?
Are all available authentication-mechanisms listed in my question or is there any missing method?

Regarding SMB encryption and signing:

1. Which parts of the communication are signed when SMB signing is used? How does it prevent MITM (e.g. using ARP spoofing) and how does the key exchange work? I would expect that the Domain Controller is used as a CA for a PKI, is that true? How does this work if no domain is present (and thereby no trust-anchor)?

2. When does SMBv3 start to encrypt a transfer (if agreed upon)? At Auth already, starting with the requests or only the payload (e.g. files)?


3. Are signatures always evaluated, or is it possible that a SMB-server signs and a SMB-Client does not check/verify signatures? If possible, when does this happen?


Regarding Net-NTLM v1 and v2:

1. Is the SID included in Net-NTLMv1 and v2 authentications or only domain name and user name? Can a server be asked for the SID that corresponds to a user name?


2. NTLMv1 does "usually include LMHash and NTHash" - but under which circumstances are which hashes included and are which hashes checked? If there is no LMHash (Vista and newer) is NTLMv1 not usable? Is it possible to obtain a LMHash by asking for Net-NTLMv1 in domain-Levels > 2013 ?


3. What is the client challenge in Net-NTLMv2 good for? I guess it is for optional server authentication, but how can the client verify? Or does the server track the client challenges in order to not allow the same client challenge again (replay prevention)?


Thank you very much.

:)

 

How to solve problems with accessing, discovering and connecting to NAS with SMB connection from Windows 10

I am hoping Microsoft themselves, is picking this question up, and taking this seriously, and will answer this urgently, as it is causing us all so much frustration.

 

How to solve problems with accessing, discovering and connecting to NAS with SMB connection from Windows 10

I am experiencing difficulties with accessing, discovering and connecting to my NAS with SMB connection from Windows 10.

I have tried most of the solutions suggest on the Web, but avail, none of them worked.

• Enabling SMB v2 and restarting
• Checking SMB v1 in Windows components is ticked on
• Etc.

It seems that Microsoft has broken something though their patches

If anyone can supply me with a permanent/ final fix,
not workaround, please post it here.

 

How to solve problems with accessing, discovering and connecting to NAS with SMB connection from Windows 10

I am experiencing difficulties with accessing, discovering and connecting to my NAS with SMB connection from Windows 10.

I have tried most of the solutions suggest on the Web, but avail, none of them worked.

• Enabling SMB v2 and restarting
• Checking SMB v1 in Windows components is ticked on
• Etc.

It seems that Microsoft has broken something though their patches

If anyone can supply me with a permanent/ final fix,
not workaround, please post it here.