We've encountered this problem too. We had to configure a GPO delta for our File Server allowing SMB v1 only on that server and have locked down access to the LEM share via share permissions. The rest of the domain remains SMBv2 only. I guess we could write some firewall rules to lock down the SMBv1 access to only our LEM appliances but haven't done so yet. On the jobs to do list.
↧