Older Synology Nas & CIFS

Windows 10 access to NAS share. SMB 1.0 and 3.0

https://community.synology.com/enu/forum/1/post/120393

Nov 01, 201815

I had a problem on some of my Windows 10 machines where they couldn’t access my DS213+ NAS share and came up with error 0x80004005 in Windows Explorer. After much research I’ve found that on the Windows 10 machines that had an error, SMB 1.0 isn’t enabled. Enabling this solved the problem. However SMB 1.0 is no longer considered secure and has been depracted by Microsoft. So enabling it creates a security issues.

The solution is to enable SMB 3.0 on the Synology server. This isn’t enabled by default.

Steps as follows

On Synology NAS

  • Go to Control Panel and select File Services
    • On the SMB/AFP/NFS tab, select Advanced Settings button
      • Change Maximum SMB protocol to SMB3
      • Change Minumum SMB protocol to SMB2 with large MTU

On Windows 10

  • Go to Control Panel–>Programs–>Turn Windows features on or off
    • Uncheck SMB 1.0/CIFS
    • Check SMB Direct (Windows 10 Pro only I think. Seems enabled by default on Windows 10 Home)

Restart

NAS share should now be accessible through explorer. I enter \\diskstation in address bar to connect. For me I can’t browse to it through “Network” in Explorer, but that might be the Norton firewall.

This has the added benfit of removing the SMB 1.0 vulnerability from the Synology NAS as well.