Hi Ned, thank you for the reply. I don't often get responses to my ongoing SMB1 work. We've over 30 Mazak milling machines across 2 sites, all dating back around 20 years, there was significant investment in these back then and to replace them now would be well into a 8 figure sum, but as they are still milling, still working (mostly) then its not up to us in IT to tell them thats it, switch them off. We have our say of course, express our concerns and generally lay our stance on the table but as yet they'll probably be kept for a few years. Being Mazaks they cannot be upgraded either, no Win 8+ drivers available, even if there were the cost would be uneconomical.
So we're stuck with them for the time being. They're a lot of companies in the same boat as us, we certainly know the risks and have segregated VLANS set up, access is completely locked down to and from the machines, no internet access is possible so we do as much as we can to reduce the risks. We've got IT groups set up to regularly discuss SMB1, we meet with Manufacturing every month to give them an update and we generally try to keep on top of things.
https://learn.microsoft.com/en-us/answers/questions/1661957/adding-legacy-computers-to-a-domain
Sorry, thats my minor rant for the day, thank you