Microsoft plans to drop SMB1 binaries from Windows 11
- Reference: 1650461797
- News link: https://www.theregister.co.uk/2022/04/20/smb1_uninstalled_by_default_windows_11/
- Source link:
As is the company's wont, Dev Channel Windows Insiders will first have the protocol not installed for all editions. This will then be the default for the next major release of Windows 11, expected later this year. In-place upgrades, where SMB1 was already in use, aren't affected and administrators that really need it can deliberately pop it back on.
So 2022 will be the year when there will be no fresh installs of Windows 11 that has the aged protocol installed by default.
[2]
Microsoft's Ned Pyle, principal program manager in the Windows Server High Availability and Storage group, who has waged a war on the protocol for a good many years within the walls of Redmond, also had news for the future:
[3]
[4]
"We are going to remove the SMB1 binaries in a future release. Windows and Windows Server will no longer include the drivers and DLLs of SMB1."
Microsoft will still provide an install package for organizations that can't do without SMB1, but it will, according to Pyle, be unsupported. Something for that NAS that has lurked beneath the stairs for a decade or so, or the one weird bit of hardware on the factory floor.
[5]
There is a certain inevitability to the news. Microsoft had already shipped Windows 10 and Windows Server 1709 [6]with SMB1 not installed by default . Windows 10 Home and Pro still had the client just in case. It would, however, be uninstalled automatically in unmanaged environments if not used for 15 days (excluding time during which the computer is off).
[7]Samba 4.16 release strips away more SMB 1
[8]Microsoft finds itself in odd position of sparing elderly, insecure protocols: Grants stay of execution to TLS 1.0, 1.1
[9]Microsoft has another crack at fixing Chrome problems in Windows 10
[10]Have to use SMB 1.0? Windows 10 April 2018 Update says NO
From Windows 10 1809, the Pro version no longer contained the SMB1 client by default.
Other groups were also sawing away at the file-sharing protocol. Bits of it have, for example, been [11]removed from Samba 4.16 and the project had declared SMB1 deprecated and off by default since Samba 4.11. However, it is the final excising promised by Pyle in Windows that could result in those elderly NAS boxes that still depend on it being turned off for good.
As for why it has taken so long for Microsoft to get to this point, Pyle said simply: "I had to save this Home edition behavior for last, it's going to cause a consumer pain among folks who are still running very old equipment, a group that's the least likely to understand why their new Windows 11 laptop can't connect to their old networked hard drive."
With Windows 10 supported until 2025, it seems there will remain a glimmer of life in the old, hideously unsecure dog yet. However, the end is most definitely nigh. ®
Get our [12]Tech Resources
[1] https://techcommunity.microsoft.com/t5/storage-at-microsoft/smb1-now-disabled-by-default-for-windows-11-home-insiders-builds/ba-p/3289473
[2] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=2&c=2YmAuNRO4CGrh1qCnMSoSFgAAAAs&t=ct%3Dns%26unitnum%3D2%26raptor%3Dcondor%26pos%3Dtop%26test%3D0
[3] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YmAuNRO4CGrh1qCnMSoSFgAAAAs&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[4] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=3&c=33YmAuNRO4CGrh1qCnMSoSFgAAAAs&t=ct%3Dns%26unitnum%3D3%26raptor%3Deagle%26pos%3Dmid%26test%3D0
[5] https://pubads.g.doubleclick.net/gampad/jump?co=1&iu=/6978/reg_software/oses&sz=300x50%7C300x100%7C300x250%7C300x251%7C300x252%7C300x600%7C300x601&tile=4&c=44YmAuNRO4CGrh1qCnMSoSFgAAAAs&t=ct%3Dns%26unitnum%3D4%26raptor%3Dfalcon%26pos%3Dmid%26test%3D0
[6] https://docs.microsoft.com/en-gb/windows-server/storage/file-server/troubleshoot/smbv1-not-installed-by-default-in-windows
[7] https://www.theregister.com/2022/03/23/samba_416_toctou_smb/
[8] https://www.theregister.com/2020/04/01/microsoft_extends_tls_support/
[9] https://www.theregister.com/2018/06/27/windows_10_path_chrome_smb1_patch/
[10] https://www.theregister.com/2018/06/08/windows_10_smb1/
[11] https://www.theregister.com/2022/03/23/samba_416_toctou_smb/
[12] https://whitepapers.theregister.com/
Re: That NAS under the stairs
Same here. Debian & Devuan stopped talking to it with SMB some time ago but it also has an FTP server so it's still reachable. What's more the Brother all-in-one scans to it so it's still in use.
SMB2 has been available in Samba since August 2011. It was added to FreebSD Ports in October 2011, and as far as I can see, on Debian, it first arrived with Wheezy in May 2013. If you are using FreeNAS (now TrueNAS), I guess it would lag FreeBSD by a bit, but not 11 years.
So surely everyone has had plenty of time to upgrade their NASes?
If it ain't broken...
My NAS is not exposed to the internet so why bother?
Some older NAS boxes don't support it and never will because the vendors want you to upgrade. Used to have a Netgear ReadyNAS and the Duo firmware didn't support anything other than SMB1.
The second issue is that almost every contract I work at, there's still a few Server 2003 boxes lurking around with a legacy app that is still required but can't be moved to anything newer for whatever reason (vendor gone under or it's got to be kept for a few more years unused for compliance reasons).
Very old.
Mind you, very old meaning 7+ years old. Just so you know what "very old" means.
Microsoft created the beast, gave us the neighborhood, praised its holy name as lord god of os features.
And now they admit they were absolute morons. Typical Microsoft.
Re: Very old.
Where do you get 7 years from? SMB 2.0 came out in 2006.
Problems ahead for old Sonos units
I believe that the original Sonos boxes can only connect to servers with SMB1, so that's going to be an issue for anyone trying to get them to connect to a new Windows box. I ran into the same problem when a NAS upgrade disabled SMB1 by default. As ever, it was only later that I tried streaming music to the Sonos and didn't immediately tie the failure to the previous NAS upgrade. Of course, Sonos sell upgrades for their boxes but that can be a tidy sum for a multi-room system.
I use the Sonos units to stream the music from a NAS and then out of an optical output to the proper hi-fi. Gives a nice interface on a variety of phones and tablets in the household. The hi-fi is fine - and likely will be for years - but the Sonos units not so much. I'd love to switch away from SMB1 but unless Sonos release a feature upgrade that isn't an option. I haven't checked the dates, but I'm pretty sure there were later versions of SMB available when the Sonos first shipped, or within their lifetime, so there's an argument that they could/should have added support.
That NAS under the stairs
Can't help feeling that there are still an awful lot of them out there, and quite likely some with no practical hope of being updated themselves.