-
Patch lady – Scanners and SMBv1
So if your older scanner suddenly doesn’t work consider this: In 1709 if you did an in place upgrade, you retain the SMBv1 in your networking configuration. However because this is deemed very unsafe (and it is a risk to keep it enabled), Microsoft does a check to see if you are still using it. “In-place upgrades and Insider flights of Windows 10 Home and Windows 10 Professional do not automatically remove SMB1 initially. If the SMBv1 client or server is not used for 15 days in total (excluding the time during which the computer is off), they each automatically uninstall themselves.”
So 15 days after SMBv1 on the client is not used, the system will send a dism command to disable SMBv1
If suddenly your clients (if you are a consultant), or you (if it’s your computer) won’t scan to computer or scan to share, and you are using an older multi function device, go into your Windows 10 1709 and see if you can spot this in your event log in the setup section:
Event 8
Initiating changes to turn off update SMB1Protocol-Client of package SMB1-Package. Client id: DISM Package Manager Provider.
If so, see if your printer/scanner manufacturer has a firmware update to support SMBv2 or SMBv3. If not, you may need to either purchase a new device, or decide to lower your defenses. Remember SMBv1 is often used in attacks to gain more rights and more toe-holds into a system and thus distribute ransomware.
Bottom line if suddenly you can’t scan to a folder, check to see if that device only supports SMBv1 and then decide if you want to risk enabling it.