Windows 10: smb question

No problem, just a question.
I am wondering why in my case access to shares between two desktop PC's takes place with smb v2 and not with smb v3.
W10 Pro, v1909
As said, communication is ok, no problem.

:)

 

smb question

No problem, just a question.
I am wondering why in my case access to shares between two desktop PC's takes place with smb v2 and not with smb v3.
W10 Pro, v1909
As said, communication is ok, no problem.

 

How to solve problems with accessing, discovering and connecting to NAS with SMB connection from Windows 10

I am hoping Microsoft themselves, is picking this question up, and taking this seriously, and will answer this urgently, as it is causing us all so much frustration.

 

Detail questions about NTLM and SMB

These questions concerns Windows in general, not only Windows 10.

What combinations of auth (LM, Net-NTLMv1, Net-NTLMv2, Kerberos) and SMB (1,2,3) are possible? All?

Are all available authentication-mechanisms listed in my question or is there any missing method?

Regarding SMB encryption and signing:

1. Which parts of the communication are signed when SMB signing is used? How does it prevent MITM (e.g. using ARP spoofing) and how does the key exchange work? I would expect that the Domain Controller is used as a CA for a PKI, is that true? How does this
work if no domain is present (and thereby no trust-anchor)?

2. When does SMBv3 start to encrypt a transfer (if agreed upon)? At Auth already, starting with the requests or only the payload (e.g. files)?

3. Are signatures always evaluated, or is it possible that a SMB-server signs and a SMB-Client does not check/verify signatures? If possible, when does this happen?

Regarding Net-NTLM v1 and v2:

1. Is the SID included in Net-NTLMv1 and v2 authentications or only domain name and user name? Can a server be asked for the SID that corresponds to a user name?

2. NTLMv1 does "usually include LMHash and NTHash" - but under which circumstances are which hashes included and are which hashes checked? If there is no LMHash (Vista and newer) is NTLMv1 not usable? Is it possible to obtain a LMHash by asking for Net-NTLMv1
in domain-Levels > 2013 ?

3. What is the client challenge in Net-NTLMv2 good for? I guess it is for optional server authentication, but how can the client verify? Or does the server track the client challenges in order to not allow the same client challenge again (replay prevention)?

Thank you very much.