Heya folks, Ned here again. I have a pretty big announcement: we've started the final phase of disabling SMB1 in Windows.
Update: this change shipped in the February 2023 release and is part of...
Updated Jul 02, 2024
Version 5.0
Blog Post
For any Manufacturing companies out there running machines (Mazak, Fanuk etc) with legacy operating system (Win 2000 Pro, XP), there is a way of rejoining these machines back onto the domain, so that they can continue in production and receive new jobs.
With SMB1 enabled on a local DC and a valid, enabled Active Directory item, run the Win 2000 Pro Network Identification wizard from within Control panel, enter a valid domain ID (with Domain admin permissions) to enter the domain and Bobs your uncle.
I had an example whereby the Mazak milling machine had been off for approx 5 months so its AD entry had been automatically removed. Running through the wizard in this instance would have created an AD entry but it would have been immediately disabled and any attempt to browse that machine (to drop new .eia jobs onto it for example) would have come up with a "Trust relationship" error. So prior to the rejoin attempt I built a scrap PC with the same domain ID. Switched this PC off, then ran through the rejoin attempt again on the Mazak machine and it worked. AD entry was still enabled and normal C drive access was resumed.
I'm now slightly more popular in the Machine shop than I used to be.
Hopefully with this in mind I can keep these old legacy machines running until they are finally replaced.