AD Domain Authentication Fails Because the SMB1 Service Is Disabled by Default on the Windows 2012 Domain Controller

Hello, everyone!

This is my case about AD domain authentication fails because the SMB1 service is disabled by default on the Windows 2012 domain controller. I hope it helps!

Symptoms

Domain User Authentication and Domain User Search Fail When Windows Server 2012 R2 or Later Is Installed on the Domain Controller.

Cause

The smb1 service is disabled by default in the Windows 2012 version. However, the disk array authentication requires the smb1 service to communicate with the domain controller. Because the domain controller is not enabled, the connection between the disk array and the domain controller fails. As a result, the authentication fails.

Analysis

1. Check whether the domain controller version is Windows 2012 R2 or later.

On My Computer, click Properties.

2. Check whether the SMB1 service is enabled.

Open Administrative Tools.

Select services.

Double-click server under services.

Check whether the following information is displayed. If not, the function is disabled.

If the SMB1 service is not enabled, this problem occurs.

For other Windows versions, visit the following URL:

https://support.microsoft.com/zh-cn/help/2696547/how-to-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and-windows

Solution

1. Open Windows PowerShell on Windows Server 2012.

2. Run the following command in Windows PowerShell:

Set-SmbServerConfiguration –EnableSMB1Protocol $true

Enable SMB1.

3. Run the SmbServerConfiguration command to check whether SMB1 is enabled. If the information shown in the red box is displayed, SMB1 is enabled.

4. Modify the registry.

Change the value of DependOnService in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer from SamSS Srv2 to SamSS Srv and restart the AD domain controller.

This is my solution, how about yours? Go ahead and share it with us!