Windows 10: Intune policy to block the network sharing specifically SMB ports

Hi Team,Kindly let me know if there were any Intune policy available to block the network drive sharing from local system access, specifically SMB port blocking.

:)

 

BLOCK Outbound SMB Port 445 to Access Internet based shared and Allow SMB Port 445 to access Local Network Shares

HI,

I want to know how i can BLOCK Outbound SMB Port 445 to Access Internet based shared and Allow SMB Port 445 to access Local Network Shares from the Windows Firewall Rules in Windows 10.

Can anyone help me on this?

Thanks
Muja

 

BLOCK Outbound SMB Port 445 to Access Internet based shared and Allow SMB Port 445 to access Local Network Shares

Hi Elise,

Thank you for the quick response.

My Scenario is as below,

1. I work from home and connected to my Public Profile Wifi

2. Also, i use my corporate VPN Client to connect to my Corporate Network, the a Adapter has identified as "Public:.

What i need is

1. Block the SMB 445 port to internet (Eg: Block 443 port for "portquiz.net")

2. Allow the SMB 445 port to access my corporate network SMB shares through the VPN connection (Eg: Allow 443 port for my "corporate.contoso.com" DFS.)

Is there any way of archiving the above Goal through the windows firewall?

Thanks
Muja

 

Network Shares blocked by firewall

Hi,

Thank you for writing to Microsoft Community Forums.

I understand that you are facing issues with Network Sharing being blocked by the Firewall. I would suggest you to check and confirm if the SMB 1.0 CIFS File Sharing feature is enabled in the system that is facing this issue. You
can follow the steps below.

Steps to enable SMB 1.0 CIFS File Sharing Support:

1. Press the Windows and
   R key together, this will open the Run dialogue box for you.
   
2. Type appwiz.cpl and press enter, this will open the
   Programs and Features window for you.
   
3. Click on Turn Windows features on or off in the left pane.
   
4. In the Windows Features window, scroll down and under
   SMB 1.0 CIFS File Sharing Support, check the boxes next to
   SMB 1.0/CIFS Client and SMB 1.0/ CIFS Server. If the boxes are already ticked, please uncheck the box and check it again.
   
5. You will be prompted to restart your Computer, kindly restart the system and check if the issue still persists.
   

As the systems are in Domain, if the issue still persists, I would suggest you to post your query in
IT Pro ‘TechNet’ forums, where we have support professionals
who are well equipped with the knowledge on systems connected in Domain to assist you with your query.

Regards,

Aaron Summith

Microsoft Community – Moderator