用的群晖做的文件服务器,一直用得好好的没啥问题,有天同事反映有台win7机器怎么也访问不了这台文件服务器,用正确的账号密码登录一直提示不对,同样账号在其他机器就没问题。
我试下登录也是同样的错误,然后去群晖管理日志看到了如下的错误提示
User [TEMP-13-001\temp] from [192.168.8.115] failed to log in via [SMB] due to [NTLMv1 not permitted].
然后上网搜了半天才知道大概什么问题,可能时群晖某个版本升级提高了安全性,禁止了不安全的NTLMv1协议。然后这台机器一直没有Windows update,也没修改默认的安全等级,所以因为安全性太低就被拒绝登录了。
系统修改方法如下:
- Use “Start->Run” and type in “gpedit.msc” in the “Run” dialog box. A “Group Policy” window will open.
- Click down to “Local Computer Policy -> Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options.
- Find the policy “Network Security: LAN Manager authentication level”.
- Right click on this policy and choose “Properties”.
- Choose “Send NTLMv2 response only/refuse LM & NTLM”.
- Click OK and confirm the setting change.
- Close the “Group Policy” window.
- You are done configuring Windows!
然后再登录就能进去了。
参考文章:https://services.dartmouth.edu/TDClient/1806/Portal/KB/ArticleDet?ID=136495