RE: Please review my migration plan for moving Forest from W2K to

Hello Bill,

Thanks for the reply.

According to the message, I understand that you are concerning the SMB
signing.

As we see in the article 325379, if some network clients that use the
SMB/CIFS protocol will access shared files and printers in the Root Domain,
we have to disable SMB signing on it.

I understand that the 2 domains you mentioned are under the same forest.
Root domain is the forest root domain, and User domain is the tree root
domain. Is this correct?
By default, the 2 domains have a Two-way trust. You can check this to make
sure. So User domain clients may contact Root domain controllers to access
the shared files and printers in Root domain. You may decide whether to
disable SMB signing based on your real environment. If you are sure User
domain clients will not use the resources in the Root domain, we can
disable SMB signing on the User domain only.

Please refer to the following article for more information about SMB
signing.

Overview of Server Message Block signing
http://support.microsoft.com/default.aspx?scid=kb;en-us;887429


As for the 2nd question, I think the reverse step should reenable SMB
signing.


In addition, I have found the following article which addresses some issue
when disabling SMB signing. You may have a check.

You cannot open file shares or Group Policy snap-ins when you disable SMB
signing for the Workstation or Server service on a domain controller
http://support.microsoft.com/default.aspx?scid=kb;en-us;839499


I believe that there will always be a lot to consider before we perform the
real upgrade. However, please understand that our newsgroup is focused on
break/fix issues. If you have related break/fix issue in the real process,
please post back in the newsgroup, since we will never cover all the issues
beforehand due to the complicated real network environment.

Your understanding and cooperation on this will be greatly appreciated.

Best regards,

Frances He

Microsoft Online Partner Support

When responding to posts, please "Reply to Group" via your newsreader so
that others may learn and benefit from your issue.
=====================================================
Business-Critical Phone Support (BCPS) provides you with technical phone
support at no charge during critical LAN outages or "business down"
situations. This benefit is available 24 hours a day, 7 days a week to all
Microsoft technology partners in the United States and Canada.

This and other support options are available here:
BCPS:
https://partner.microsoft.com/US/technicalsupport/supportoverview/40010469
Others: https://partner.microsoft.com/US/technicalsupport/supportoverview/

If you are outside the United States, please visit our International
Support page: http://support.microsoft.com/common/international.aspx.
=====================================================
This posting is provided "AS IS" with no warranties, and confers no rights.

.

Relevant Pages

  • Re: Installation des Servicepacks 1 f?r Vista kein Zugriff auf Freigaben
    ... wennes sich um solche Kleinigkeiten handelt. ... "SMB message signing accounts for 25 percent of all support calls to ... message signing are that older systems running Windows 9x cannot ...
    (microsoft.public.de.german.windows.server.general)
  • RE: To disable SMB packet and secure channel signing enforcement on Windows Server 2003-based domain
    ... I've done a lot of security assessments on Multi-Function Devices ... To disable SMB packet and secure channel signing ... If you disable the SMB signing requirement it means that all your SMB ...
    (Focus-Microsoft)
  • Re: SMB signing deaktivieren
    ... Die angesprochenen 1030/1058 Fehler hatte ich zwar auch mal - aber erst ... Wir hatten das SMB ... Signing schon während der Migration auf AD deaktiviert und die 1030/1058 ... welches nicht unter sprürbaren Performance ...
    (microsoft.public.de.german.windows.server.active_directory)
  • Re: clients dropping connections.
    ... I don't know for sure if that is the issue, but there are known problems with smb ... signing and XP Pro computers resulting in inconsistent network connections. ... >> with XP computers that disabling this setting may help. ...
    (microsoft.public.win2000.networking)