�����JFIF��XX����������    $.' ",#(7),01444'9=82<.342  2!!22222222222222222222222222222222222222222222222222�����"����4���������������������������� ���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������,�PG"Z_�4�˷����kjز�Z�,F+��_z�,�© �����zh6�٨�ic�fu������������������������������������#ډb���_�N��?�����������wQ���5-�~�I���8���������������������������������TK<5o�Iv-������������������k�_U_������������������������������~b�M��d��������Ӝ�U�Hh��?]��E�w��Q���k�{��_}qFW7HTՑ��Y��F�����?_�'ϔ��_�Ջt������������������������=||I �����6�έ"�����D���/[�k�9����Y�8������ds|\���Ҿp6�Ҵ���]��.����6���z<�v��@]�i%������������������������$j��~����g��J>��no����pM[me�i$[�����������s�o�ᘨ�˸ nɜG-�ĨU�ycP���3.DB�li�;���������������������hj���x����7Z^�N�h��������N3u{�:j�����x�힞��#M��&��jL P@��_���� P�������������������&��o8��������9������@Sz���6�t7#O�ߋ �����s}Yf�T������lmr����Z)'N��k�۞p�����w\�T���������������ȯ?�8`���O��i{wﭹW�[�r�� ��Q4F�׊������3m&L�=��h3�������z~��#����\�l :�F,j@�� ʱ�wQT����8�"kJO����6�֚l������������������}����R�>ډK���]��y����&����p�}b������;N�1�m�r$����|��7�>e�@���B�TM*-i�H��g�D�)� E�m�|�ؘbҗ�a���Ҿ����������������t4�����o���G��*oCN�rP���Q��@z,|?W[0���������:�n,j���WiE��W������$~/�hp\��?��{(�0���+�Y8rΟ�+����>S-S���������������VN;���}�s?.����� w��9��˟<���Mq4�Wv'������{)0�1mB����V����W[��������8�/<� �%���wT^�5���b��)iM� p�g�N�&ݝ������������VO~��q���u���9��� ����!��J27�����$����O-���! �:���%H��� ـ�������y�ΠM=t{!S�� �oK8�������t<����è��������:a��������[������ա�H���~��w��Qz`�p����o�^ ������Q��n����� �,uu�C��$ ^���,�������8�#��:�6��e�|~�����������!�3��3.�\0�����q��o�4`.|� ����y�Q�`~;�d�ׯ,��O�Zw�������`73�v�܋�<�����Ȏ�� ـ4k��5�K�a�u�=9Yd��$>x�A�&�� j0� ���vF��� Y���|�y��� ~�6�@c��1vOp��������Ig�����4��l�OD�����L����� R���c���j�_�uX�6��3?nk��Wy�f;^*B� ��@���~a�`��Eu�������+�����6�L��.ü>��}y���}_�O�6�͐�:�Yr���G�X��kG������l^w����������~㒶sy���Iu�!���� W ��X��N�7BV��O��!X�2����wvG�R�f�T#�����t�/?���%8�^�W�aT����G�cL�M���I��(J����1~�8�?aT ���]����AS�E��(��*E}� 2������#I/�׍qz��^t�̔���������b�Yz4x����t�){ OH�����+(E��A&�N�������XT��o��"�XC����'���)}�J�z�p� ����~5�}�^����+�6����w��c��Q�|�Lp�d�H��}�(�.|����k��c4^�����"�����Z?ȕ ��a<�������L�!0�39C� �Eu�����C�F�Ew�ç ;�n?�*o���B�8�bʝ���'#Rqf����M}7����]�������s2tcS{�\icTx;�\��7K���P������ʇ Z O-��~�������c>"��?��������P�����E��O�8��@�8��G��Q�g�a�Վ���󁶠��䧘��_%#r�>�����1�z�a���eb��qcP��ѵ��n���#L��� =��׀t� L�7�`�����V����A{�C:�g���e@�����w1 Xp�3�c3�ġ�������p��M"'-�@n4���fG���B3�DJ�8[Jo�ߐ���gK)ƛ��$���� �������8�3�����+���� �����6�ʻ���� ���S�kI�*KZlT _`�������?��K�����QK�d���������B`�s}�>���`������*�>��,*@J�d�oF*�����弝��O}�k��s��]��y�ߘ�������c1G�V���<=�7��7����6��q�PT��tXԀ�!9*4�4Tހ���3XΛex�46�������Y��D ����� ����BdemDa����\�_l,����G�/���֌7���Y�](�xTt^%�GE�����4�}bT����ڹ�����;��Y)���B�Q��u��>J/J ���⮶.�XԄ��j�ݳ������+E��d ���r�5�_D�����1 ���o�� �B�x�΢�#����<��W�����8���R6�@���g�M�.��� dr�D��>(otU��@�x=��~v���2� ӣ�d�oBd�����3�eO�6�㣷����������ݜ�6��6Y��Qz`����S��{���\P��~z m5{J/L��1������<�e�ͅPu���b�]�ϔ��������'�������f�b� Zpw��c`"��i���BD@:)ִ�:�]��h���v�E��w���T�l�������P����"Ju�}��وV ��J��G6��. J/�Qgl߭�e�����@�z�Zev2u����)]կ���������7x�������s�M�-<ɯ�c��r��v�����@��$�ޮ}lk���a����'����>x��O\�Z������Fu>������ck#��&:��`�$��ai�>2Δ����l���oF[h�������lE�ܺ�Π���k:)���`������� $[6�����9�����kOw�\|�����8}������ބ:��񶐕��������I�A1/���=�2[�,�!��.}gN#�u����b���� ~���������݊��}34q�����d�E��L��������c��$���"�[q�U�硬g^��%B ��z���r�p�������J�ru%v\h�����1Y�ne`������ǥ:g����pQM~�^��Xi� ��`S�:V2������9.�P���V������?B�k�� ��������AEvw%�_�9C�Q����wKekP�ؠ�\������;Io d�{ ߞo�c1eP�����\� `����E=���@K<�Y��������eڼ�J����w����{av�F�'�M�@��������������/J��+9p����|]���������Iw &`���8���&�M�hg���[�{�������Xj���%��Ӓ�������������������$��(�����ʹN�������<>�I���RY�����K2�NPlL�ɀ�)��&e��������B+ь����(������������������� � �JTx����_?EZ� }@���� 6�U���뙢ط�z��dWI��n` D����噥�[��uV��"�G&�����Ú����2�g�}&m���������������������?ċ���"����Om#�������������������������� ��{���������������������ON��"S�X���Ne��ysQ���@�������������Fn��Vg�����dX�~nj����������������������]J�<�K]:����FW���b�������62����������=��5f����JKw����bf�X������������������������55��~J �%^�������:�-�QIE��P��v�nZum� z � ~ə ���� ���ة����;�f��\v�������g�8�1��f2�������������������������4;�V���ǔ�)�������������������9���1\������������������������������c��v�/'Ƞ�w������������������$�4�R-��t����������������������������������� e�6�/�ġ �̕Ecy�J���u�B���<�W�ַ~�w[B1L۲�-JS΂�{���΃�������������������������������������������A��20�c#���������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������������@���� 0!1@AP"#2Q`$3V�%45a6�FRUq����� ������^7ׅ,$n��������+��F�`��2X'��0vM��p�L=�������5��8������u�p~���.�`r�����\����O��,ư�0oS ��_�M�����l���4�kv\JSd���x���SW�<��Ae�IX����������$I���w�:S���y���›R��9�Q[���,�5�;�@]�%���u�@ *ro�lbI �� ��+���%m:�͇ZV�����u�̉����θau<�fc�.����{�4Ա� �Q����*�Sm��8\ujqs]{kN���)qO�y�_*dJ�b�7���yQqI&9�ԌK!�M}�R�;�������S�T���1���i[U�ɵz�]��U)V�S6���3$K{��ߊ<�(� E]Զ[ǼENg�����'�\?#)Dkf��J���o��v���'�%ƞ�&K�u��!��b�35LX�Ϸ��63$K�a�;�9>,R��W��3�3� d�JeTYE.Mϧ��-�o�j3+y��y^�c�������VO�9NV\nd�1 ��!͕_)a�v;����թ�M�lWR1��)El��P;��yوÏ�u 3�k�5Pr6<�⒲l�!˞*��u־�n�!�l:����UNW ��%��Chx8vL'��X�@��*��)���̮��ˍ��� ����D-M�+J�U�kvK����+�x8��cY������?�Ԡ��~3mo��|�u@[XeY�C�\Kp�x8�oC�C�&����N�~3-H���� ��MX�s�u<`���~"WL��$8ξ��3���a�)|:@�m�\���^�`�@ҷ)�5p+��6���p�%i)P M���ngc�����#0Aruz���RL+xSS?���ʮ}()#�t��mˇ!��0}}y����<�e� �-ή�Ԩ��X������ MF���ԙ~l L.3���}�V뽺�v������멬��Nl�)�2����^�Iq��a��M��qG��T�����c3#������3U�Ǎ���}��לS�|qa��ڃ�+���-��2�f����/��bz��ڐ�� �ݼ[2�ç����k�X�2�* �Z�d���J�G����M*9W���s{��w���T��x��y,�in�O�v��]���n����P�$��JB@=4�OTI�n��e�22a\����q�d���%�$��(���:���: /*�K[PR�fr\nڙdN���F�n�$�4��[�� U�zƶ����� �mʋ���,�ao�u 3�z� �x��Kn����\[��VFmbE;�_U��&V�Gg�]L�۪&#n%�$ɯ��dG���D�TI=�%+AB�Ru#��b4�1�»x�cs�YzڙJG��f��Il���d�eF'T� iA��T���uC�$����Y��H?����[!G`}���ͪ� �纤Hv\������j�Ex�K���!���OiƸ�Yj�+u-<���'q����uN�*�r\��+�]���<�wOZ.fp�ێ��,-*)V?j-kÊ#�`�r��dV����(�ݽBk�����G�ƛk�QmUڗe��Z���f}|����8�8��a���i��3'J�����~G_�^���d�8w������ R�`(�~�.��u���l�s+g�bv���W���lGc}��u���afE~1�Ue������Z�0�8�=e�� f@/�jqEKQQ�J���oN��J���W5~M>$6�Lt�;$ʳ{���^��6�{����v6���ķܰg�V�cnn �~z�x�«�,2�u�?cE+Ș�H؎�%�Za�)���X>uW�Tz�Nyo����s���FQƤ��$��*�&�LLXL)�1�" L��eO��ɟ�9=���:t��Z���c��Ž���Y?�ӭV�wv�~,Y��r�ۗ�|�y��GaF�����C�����.�+� ���v1���fήJ�����]�S��T��B��n5sW}y�$��~z�'�c ��8 ��� ,! �p��VN�S��N�N�q��y8z˱�A��4��*��'������2n<�s���^ǧ˭P�Jޮɏ�U�G�L�J�*#��<�V��t7�8����TĜ>��i}K%,���)[��z�21z ?�N�i�n1?T�I�R#��m-�����������������1����lA�`��fT5+��ܐ�c�q՝��ʐ��,���3�f2U�եmab��#ŠdQ�y>\��)�SLY����w#��.���ʑ�f��� ,"+�w�~�N�'�c�O�3F�������N<���)j��&��,-� �љ���֊�_�zS���TǦ����w�>��?�������n��U仆�V���e�����0���$�C�d���rP �m�׈e�Xm�Vu� �L��.�bֹ��� �[Դaզ���*��\y�8�Է:�Ez\�0�Kq�C b��̘��cө���Q��=0Y��s�N��S.����3.���O�o:���#���v7�[#߫ ��5�܎�L���Er4���9n��COWlG�^��0k�%<���ZB���aB_���������'=��{i�v�l�$�uC���mƎҝ{�c㱼�y]���W�i ��ߧc��m�H� m�"�"�����;Y�ߝ�Z�Ǔ�����:S#��|}�y�,/k�Ld� TA�(�AI$+I3��;Y*���Z��}|��ӧO��d�v��..#:n��f>�>���ȶI�TX��� 8��y����"d�R�|�)0���=���n4��6ⲑ�+��r<�O�܂~zh�z����7ܓ�HH�Ga롏���nCo�>������a ���~]���R���̲c?�6(�q�;5%� |�uj�~z8R�=X��I�V=�|{v�Gj\gc��q����z�؋%M�ߍ����1y��#��@f^���^�>N������#x#۹��6�Y~�?�dfPO��{��P�4��V��u1E1J �*|���%����JN��`eWu�zk M6���q t[�� ��g�G���v��WIG��u_ft����5�j�"�Y�:T��ɐ���*�;� e5���4����q$C��2d�}���� _S�L#m�Yp��O�.�C�;��c����Hi#֩%+) �Ӎ��ƲV���SYź��g |���tj��3�8���r|���V��1#;.SQ�A[���S������#���`n�+���$��$�I �P\[�@�s��(�ED�z���P��])8�G#��0B��[ى��X�II�q<��9�~[Z멜�Z�⊔IWU&A>�P~�#��dp<�?����7���c��'~���5 ��+$���lx@�M�dm��n<=e�dyX��?{�|Aef ,|n3�<~z�ƃ�uۧ�����P��Y,�ӥQ�*g�#먙R�\���;T��i,��[9Qi歉����c>]9�� ��"�c��P�� �Md?٥��If�ت�u��k��/����F��9�c*9��Ǎ:�ØF���z�n*�@|I�ށ9����N3{'��[�'ͬ�Ҳ4��#}��!�V� Fu��,�,mTIk���v C�7v���B�6k�T9��1�*l� '~��ƞF��lU��'�M ����][ΩũJ_�{�i�I�n��$����L�� j��O�dx�����kza۪��#�E��Cl����x˘�o�����V���ɞ�ljr��)�/,�߬h�L��#��^��L�ф�,íMƁe�̩�NB�L�����iL����q�}��(��q��6IçJ$�W�E$��:������=#����(�K�B����zђ <��K(�N�۫K�w��^O{!����)��H���>x�������lx�?>Պ�+�>�W���,Ly!_�D���Ō�l���Q�!�[ �S����J��1��Ɛ�Y}��b,+�Lo�x�ɓ)����=�y�oh�@�꥟/��I��ѭ=��P�y9��� �ۍYӘ�e+�p�Jnϱ?V\SO%�(�t� ���=?MR�[Ș�����d�/ ��n�l��B�7j� ��!�;ӥ�/�[-���A�>��dN�sLj ��,ɪv��=1c�.SQ�O3�U���ƀ�ܽ�E����������̻��9G�ϷD�7(�}��Ävӌ\��y�_0[w ���<΍>����a_��[0+�L��F.�޺��f�>oN�T����q;���y\��bՃ��y�jH�<|q-eɏ�_?_9+P���Hp$�����[ux�K w�Mw��N�ی'$Y2�=��q���KB��P��~�������Yul:�[<����F1�2�O���5=d����]Y�sw:���Ϯ���E��j,_Q��X��z`H1,#II ��d�wr��P˂@�ZJV����y$�\y�{}��^~���[:N����ߌ�U�������O��d�����ؾe��${p>G��3c���Ė�lʌ�� ת��[��`ϱ�-W����dg�I��ig2��� ��}s ��ؤ(%#sS@���~���3�X�nRG�~\jc3�v��ӍL��M[JB�T��s3}��j�Nʖ��W����;7���ç?=X�F=-�=����q�ߚ���#���='�c��7���ڑW�I(O+=:uxq�������������e2�zi+�kuG�R��������0�&e�n���iT^J����~\jy���p'dtG��s����O��3����9* �b#Ɋ�� p������[Bws�T�>d4�ۧs���nv�n���U���_�~,�v����ƜJ1��s�� �QIz���)�(lv8M���U=�;����56��G���s#�K���MP�=��LvyGd��}�VwWBF�'�à �?MH�U�g2�� ����!�p�7Q��j��ڴ����=��j�u��� Jn�A s���uM������e��Ɔ�Ҕ�!)�'��8Ϣ�ٔ���ޝ(��Vp���צ֖d=�IC�J�Ǡ{q������kԭ�߸���i��@K����u�|�p=..�*+����x�����z[Aqġ#s2a�Ɗ���RR�)*HRsi�~�a &f��M��P����-K�L@��Z��Xy�'x�{}��Zm+���:�)�) IJ�-i�u���� ���ܒH��'��L(7�y�GӜq���� j��� 6ߌg1�g�o���,kر���tY�?W,���p���e���f�OQS��!K�۟cҒA�|ս�j�>��=⬒��˧L[�� �߿2JaB~R��u�:��Q�] �0H~���]�7��Ƽ�I���(�}��cq '�ήET���q�?f�ab���ӥvr� �)o��-Q��_'����ᴎo��K������;��V���o��%���~OK ����*��b�f:���-ťIR��`B�5!RB@���ï�� �u �̯e\�_U�_������� g�ES��3��������QT��a�����x����U<~�c?�*�#]�MW,[8O�a�x��]�1bC|踤�P��lw5V%�)�{t�<��d��5���0i�XSU��m:��Z�┵�i�"��1�^B�-��P�hJ��&)O��*�D��c�W��vM��)����}���P��ܗ-q����\mmζZ-l@�}��a��E�6��F�@��&Sg@���ݚ�M����� ȹ 4����#p�\H����dYDo�H���"��\��..R�B�H�z_�/5˘����6��KhJR��P�mƶi�m���3��,#c�co��q�a)*P�t����R�m�k�7x�D�E�\Y�閣_X�<���~�)���c[[�BP����6�Yq���S��0����%_����;��Àv�~�| VS؇ ��'O0��F0��\���U�-�d@�����7�SJ*z��3n��y��P����O����������m�~�P�3|Y��ʉr#�C�<�G~�.,! ���bqx���h~0=��!ǫ�jy����l��O,�[B��~��|9��ٱ����Xly�#�i�B��g%�S��������tˋ���e���ې��\[d�t)��.+u�|1 ������#�~Oj����hS�%��i.�~X���I�H�m��0n���c�1uE�q��cF�RF�o���7� �O�ꮧ� ���ۛ{��ʛi5�rw?׌#Qn�TW��~?y$��m\�\o����%W� ?=>S�N@�� �Ʈ���R����N�)�r"C�:��:����� �����#��qb��Y�. �6[��2K����2u�Ǧ�HYR��Q�MV��� �G�$��Q+.>�����nNH��q�^��� ����q��mM��V��D�+�-�#*�U�̒ ���p욳��u:�������IB���m����PV@O���r[b= �� ��1U�E��_Nm�yKbN�O���U�}�the�`�|6֮P>�\2�P�V���I�D�i�P�O;�9�r�mAHG�W�S]��J*�_�G��+kP�2����Ka�Z���H�'K�x�W�MZ%�O�YD�Rc+o��?�q��Ghm��d�S�oh�\�D�|:W������UA�Qc yT�q��������~^�H��/��#p�CZ���T�I�1�ӏT����4��"�ČZ�����}��`w�#�*,ʹ�� ��0�i��課�Om�*�da��^gJ݅{���l�e9uF#T�ֲ��̲�ٞC"�q���ߍ ոޑ�o#�XZTp����@ o�8��(jd��xw�]�,f���`~��|,s��^����f�1���t��|��m�򸄭/ctr��5s��7�9Q�4�H1꠲BB@�l9@���C�����+�wp�xu�£Yc�9��?`@#�o�mH�s2��)�=��2�.�l����jg�9$�Y�S�%*L������R�Y������7Z���,*=�䷘$�������arm�o�ϰ���UW.|�r�uf����IGw�t����Zwo��~5 ��YյhO+=8fF�)�W�7�L9lM�̘·Y���֘YLf�큹�pRF���99.A �"wz��=E\Z���'a� 2��Ǚ�#;�'}�G���*��l��^"q��+2FQ� hj��kŦ��${���ޮ-�T�٭cf�|�3#~�RJ����t��$b�(R��(����r���dx� >U b�&9,>���%E\� Ά�e�$��'�q't��*�א���ެ�b��-|d���SB�O�O��$�R+�H�)�܎�K��1m`;�J�2�Y~9��O�g8=vqD`K[�F)k�[���1m޼c��n���]s�k�z$@��)!I �x՝"v��9=�ZA=`Ɠi �:�E��)`�7��vI��}d�YI�_ �o�:ob���o ���3Q��&D&�2=�� �Ά��;>�h����y.*ⅥS������Ӭ�+q&����j|UƧ�����}���J0��WW< ۋS�)jQR�j���Ư��rN)�Gű�4Ѷ(�S)Ǣ�8��i��W52���No˓� ۍ%�5brOn�L�;�n��\G����=�^U�dI���8$�&���h��'���+�(������cȁ߫k�l��S^���cƗjԌE�ꭔ��gF���Ȓ��@���}O���*;e�v�WV���YJ\�]X'5��ղ�k�F��b 6R�o՜m��i N�i�����>J����?��lPm�U��}>_Z&�KK��q�r��I�D�Չ~�q�3fL�:S�e>���E���-G���{L�6p�e,8��������QI��h��a�Xa��U�A'���ʂ���s�+טIjP�-��y�8ۈZ?J$��W�P� ��R�s�]��|�l(�ԓ��sƊi��o(��S0���Y� 8�T97.�����WiL��c�~�dxc�E|�2!�X�K�Ƙਫ਼�$((�6�~|d9u+�qd�^3�89��Y�6L�.I�����?���iI�q���9�)O/뚅����O���X��X�V��ZF[�یgQ�L��K1���RҖr@v�#��X�l��F���Нy�S�8�7�kF!A��sM���^rkp�jP�DyS$N���q���nxҍ!U�f�!eh�i�2�m����`�Y�I�9r�6� �TF���C}/�y�^���Η���5d�'��9A-��J��>{�_l+�`��A���[�'��յ�ϛ#w:݅�%��X�}�&�PSt�Q�"�-��\縵�/����$Ɨh�Xb�*�y��BS����;W�ջ_mc�����vt?2}1�;qS�d�d~u:2k5�2�R�~�z+|HE!)�Ǟl��7`��0�<�,�2*���Hl-��x�^����'_TV�gZA�'j� ^�2Ϊ��N7t�����?w�� �x1��f��Iz�C-Ȗ��K�^q�;���-W�DvT�7��8�Z�������� hK�(P:��Q- �8�n�Z���܃e貾�<�1�YT<�,�����"�6{�/ �?�͟��|1�:�#g��W�>$����d��J��d�B���=��jf[��%rE^��il:��B���x���Sּ�1հ��,�=��*�7 fcG��#q� �eh?��2�7�����,�!7x��6�n�LC�4x��},Geǝ�tC.��vS �F�43��zz\��;QYC,6����~;RYS/6���|2���5���v��T��i����������mlv��������&� �nRh^ejR�LG�f���? �ۉҬܦƩ��|��Ȱ����>3����!v��i�ʯ�>�v��オ�X3e���_1z�Kȗ\<������!�8���V��]��?b�k41�Re��T�q��mz��TiOʦ�Z��Xq���L������q"+���2ۨ��8}�&N7XU7Ap�d�X��~�׿��&4e�o�F��� �H�����O���č�c�� 懴�6���͉��+)��v;j��ݷ�� �UV�� i��� j���Y9GdÒJ1��詞�����V?h��l�����l�cGs�ځ�������y�Ac������\V3�? �� ܙg�>qH�S,�E�W�[�㺨�uch�⍸�O�}���a��>�q�6�n6�����N6�q��������N� ���! 1AQaq�0@����"2BRb�#Pr���3C`��Scst���$4D���%Td���� ?�����N����a��3��m���C���w��������xA�m�q�m����m������$����4n淿t'��C"w��zU=D�\R+w�p+Y�T�&�պ@��ƃ��3ޯ?�Aﶂ��aŘ���@-�����Q�=���9D��ռ�ѻ@��M�V��P��܅�G5�f�Y<�u=,EC)�<�Fy'�"�&�չ�X~f��l�KԆV��?�� �W�N����=(� �;���{�r����ٌ�Y���h{�١������jW����P���Tc�����X�K�r��}���w�R��%��?���E��m�� �Y�q|����\lEE4����r���}�lsI�Y������f�$�=�d�yO����p�����yBj8jU�o�/�S��?�U��*������ˍ�0�������u�q�m [�?f����a�� )Q�>����6#������� ?����0UQ����,IX���(6ڵ[�DI�MNލ�c&���υ�j\��X�R|,4��� j������T�hA�e��^���d���b<����n�� �즇�=!���3�^�`j�h�ȓr��jẕ�c�,ٞX����-����a�ﶔ���#�$��]w�O��Ӫ�1y%��L�Y<�wg#�ǝ�̗`�x�xa�t�w��»1���o7o5��>�m뭛C���Uƃߜ}�C���y1Xνm�F8�jI���]����H���ۺиE@I�i;r�8ӭ�����V�F�Շ| ��&?�3|x�B�MuS�Ge�=Ӕ�#BE5G������Y!z��_e��q�р/W>|-�Ci߇�t�1ޯќd�R3�u��g�=0 5��[?�#͏��q�cf���H��{ ?u�=?�?ǯ���}Z��z���hmΔ�BFTW�����<�q��(v� ��!��z���iW]*�J�V�z��gX֧A�q�&��/w���u�gYӘa���; �i=����g:��?2�dž6�ى�k�4�>�Pxs����}������G�9���3 ���)gG�R<>r h�$��'nc�h�P��Bj��J�ҧH� -��N1���N��?��~��}-q!=��_2hc�M��l�vY%UE�@|�v����M2�.Y[|y�"Eï��K�ZF,�ɯ?,q�?v�M 80jx�"�;�9vk�����+ ֧�� �ȺU��?�%�vcV��mA�6��Qg^M�����A}�3�nl� QRN�l8�kkn�'�����(��M�7m9و�q���%ޟ���*h$Zk"��$�9��: �?U8�Sl��,,|ɒ��xH(ѷ����Gn�/Q�4�P��G�%��Ա8�N��!� �&�7�;���eKM7�4��9R/%����l�c>�x;������>��C�:�����t��h?aKX�bhe�ᜋ^�$�Iհ �hr7%F$�E��Fd���t��5���+�(M6�t����Ü�UU|zW�=a�Ts�Tg������dqP�Q����b'�m���1{|Y����X�N��b �P~��F^F:����k6�"�j!�� �I�r�`��1&�-$�Bevk:y���#y�w��I0��x��=D�4��tU���P�ZH��ڠ底taP��6����b>�xa�����Q�#� WeF��ŮNj�p�J* mQ�N�����*I�-*�ȩ�F�g�3 �5��V�ʊ�ɮ�a��5F���O@{���NX��?����H�]3��1�Ri_u��������ѕ�� ����0��� F��~��:60�p�͈�S��qX#a�5>���`�o&+�<2�D����: �������ڝ�$�nP���*)�N�|y�Ej�F�5ټ�e���ihy�Z �>���k�bH�a�v��h�-#���!�Po=@k̆IEN��@��}Ll?j�O������߭�ʞ���Q|A07x���wt!xf���I2?Z��<ץ�T���cU�j��]���陎Ltl �}5�ϓ��$�,��O�mˊ�;�@O��jE��j(�ا,��LX���LO���Ц�90�O �.����a��nA���7������j4 ��W��_ٓ���zW�jcB������y՗+EM�)d���N�g6�y1_x��p�$Lv�:��9�"z��p���ʙ$��^��JԼ*�ϭ����o���=x�Lj�6�J��u82�A�H�3$�ٕ@�=Vv�]�'�qEz�;I˼��)��=��ɯ���x �/�W(V���p�����$ �m�������u�����񶤑Oqˎ�T����r��㠚x�sr�GC��byp�G��1ߠ�w e�8�$⿄����/�M{*}��W�]˷.�CK\�ުx���/$�WP�w���r� |i���&�}�{�X� �>��$-��l���?-z���g����lΆ���(F���h�vS*���b���߲ڡn,|)mrH[���a�3�ר�[1��3o_�U�3�TC�$��(�=�)0�kgP���� ��u�^=��4 �WYCҸ:��vQ�ר�X�à��tk�m,�t*��^�,�}D*�� �"(�I��9R����>`�`��[~Q]�#af��i6l��8���6�:,s�s�N6�j"�A4���IuQ��6E,�GnH��zS�HO�uk�5$�I�4��ؤ�Q9�@��C����wp��BGv[]�u�Ov����0I4���\��y�����Q�Ѹ��~>Z��8�T��a��q�ޣ;z��a���/��S��I:�ܫ_�|������>=Z����8:�S��U�I�J��"IY���8%b8���H��:�QO�6�;7�I�S��J��ҌAά3��>c���E+&jf$eC+�z�;��V����� �r���ʺ������my�e���aQ�f&��6�ND���.:��NT�vm�<- u���ǝ\MvZY�N�NT��-A�>jr!S��n�O 1�3�Ns�%�3D@���`������ܟ 1�^c<���� �a�ɽ�̲�Xë#�w�|y�cW�=�9I*H8�p�^(4���՗�k��arOcW�tO�\�ƍR��8����'�K���I�Q�����?5�>[�}��yU�ײ -h��=��% q�ThG�2�)���"ו3]�!kB��*p�FDl�A���,�eEi�H�f�Ps�����5�H:�Փ~�H�0Dت�D�I����h�F3�������c��2���E��9�H��5�zԑ�ʚ�i�X�=:m�xg�hd(�v����׊�9iS��O��d@0ڽ���:�p�5�h-��t�&���X�q�ӕ,��ie�|���7A�2���O%P��E��htj��Y1��w�Ѓ!����  ���� ࢽ��My�7�\�a�@�ţ�J ��4�Ȼ�F�@o�̒?4�wx��)��]�P��~�����u�����5�����7X ��9��^ܩ�U;Iꭆ 5 �������eK2�7(�{|��Y׎ �V��\"���Z�1� Z�����}��(�Ǝ"�1S���_�vE30>���p;� ΝD��%x�W�?W?v����o�^V�i�d��r[��/&>�~`�9Wh��y�;���R���� ;;ɮT��?����r$�g1�K����A��C��c��K��l:�'��3 c�ﳯ*"t8�~l��)���m��+U,z��`(��>yJ�?����h>��]��v��ЍG*�{`��;y]��I�T� ;c��NU�fo¾h���/$���|NS���1�S�"�H��V���T���4��uhǜ�]�v;���5�͠x��'C\�SBpl���h}�N����� A�Bx���%��ޭ�l��/����T��w�ʽ]D�=����K���ž�r㻠l4�S�O?=�k �M:� ��c�C�a�#ha���)�ѐxc�s���gP�iG���{+���x���Q���I= �� z��ԫ+ �8"�k�ñ�j=|����c ��y��CF��/���*9ж�h{ �?4�o� ��k�m�Q�N�x��;�Y��4膚�a�w?�6�>�e]�����Q�r�:����g�,i"�����ԩA��*M�<�G��b�if��l^M��5�� �Ҩ�{����6J��ZJ�����P�*�����Y���ݛu�_4�9�I8�7���������,^ToR���m4�H��?�N�S�ѕw��/S��甍�@�9H�S�T��t�ƻ���ʒU��*{Xs�@����f������֒Li�K{H�w^���������Ϥm�tq���s� ���ք��f:��o~s��g�r��ט� �S�ѱC�e]�x���a��) ���(b-$(�j>�7q�B?ӕ�F��hV25r[7 Y� }L�R��}����*sg+��x�r�2�U=�*'WS��ZDW]�WǞ�<��叓���{�$�9Ou4��y�90-�1�'*D`�c�^o?(�9��u���ݐ��'PI&� f�Jݮ�������:wS����jfP1F:X �H�9dԯ����˝[�_54 �}*;@�ܨ�� ð�yn�T���?�ןd�#���4rG�ͨ��H�1�|-#���Mr�S3��G�3�����)�.᧏3v�z֑��r����$G"�`j �1t��x0<Ɔ�Wh6�y�6��,œ�Ga��gA����y��b��)���h�D��ß�_�m��ü �gG;��e�v��ݝ�nQ� ��C����-�*��o���y�a��M��I�>�<���]obD��"�:���G�A��-\%LT�8���c�)��+y76���o�Q�#*{�(F�⽕�y����=���rW�\p���۩�c���A���^e6��K������ʐ�cVf5$�'->���ՉN"���F�"�UQ@�f��Gb~��#�&�M=��8�ט�JNu9��D��[̤�s�o�~������� G��9T�tW^g5y$b��Y'��س�Ǵ�=��U-2 #�MC�t(�i� �lj�@Q 5�̣i�*�O����s�x�K�f��}\��M{E�V�{�υ��Ƈ�����);�H����I��fe�Lȣr�2��>��W��I�Ȃ6������i��k�� �5�YOxȺ����>��Y�f5'��|��H+��98pj�n�.O�y�������jY��~��i�w'������l�;�s�2��Y��:'lg�ꥴ)o#'Sa�a�K��Z� �m��}�`169�n���"���x��I ��*+� }F<��cГ���F�P�������ֹ*�PqX�x۩��,� ��N�� �4<-����%����:��7����W���u�`����� $�?�I��&����o��o��`v�>��P��"��l���4��5'�Z�gE���8���?��[�X�7(��.Q�-��*���ތL@̲����v��.5���[��=�t\+�CNܛ��,g�SQnH����}*F�G16���&:�t��4ُ"A��̣��$�b �|����#rs��a�����T�� ]�<�j��B�S�('$�ɻ� �wP;�/�n��?�ݜ��x�F��yUn�~mL*-�������Xf�wd^�a�}��f�,=t�׵i�.2/wpN�Ep8�OР���•��R�FJ� 55TZ��T �ɭ�<��]��/�0�r�@�f��V��V����Nz�G��^���7hZi����k��3�,kN�e|�vg�1{9]_i��X5y7� 8e]�U����'�-2,���e"����]ot�I��Y_��n�(JҼ��1�O ]bXc���Nu�No��pS���Q_���_�?i�~�x h5d'�(qw52] ��'ޤ�q��o1�R!���`ywy�A4u���h<קy���\[~�4�\ X�Wt/� 6�����n�F�a8��f���z �3$�t(���q��q�x��^�XWeN'p<-v�!�{�(>ӽDP7��ո0�y)�e$ٕv�Ih'Q�EA�m*�H��RI��=:��� ���4牢) �%_iN�ݧ�l]� �Nt���G��H�L��� ɱ�g<���1V�,�J~�ٹ�"K��Q�� 9�HS�9�?@��k����r�;we݁�]I�!{ �@�G�[�"��`���J:�n]�{�cA�E����V��ʆ���#��U9�6����j�#Y�m\��q�e4h�B�7��C�������d<�?J����1g:ٳ���=Y���D�p�ц� ׈ǔ��1�]26؜oS�'��9�V�FVu�P�h�9�xc�oq�X��p�o�5��Ա5$�9W�V(�[Ak�aY錎qf;�'�[�|���b�6�Ck��)��#a#a˙��8���=äh�4��2��C��4tm^ �n'c����]GQ$[Wҿ��i���vN�{Fu ��1�gx��1┷���N�m��{j-,��x�� Ūm�ЧS�[�s���Gna���䑴�� x�p 8<������97�Q���ϴ�v�aϚG��Rt�Һ׈�f^\r��WH�JU�7Z���y)�vg=����n��4�_)y��D'y�6�]�c�5̪��\� �PF�k����&�c;��cq�$~T�7j ���nç]�<�g ":�to�t}�159�<�/�8������m�b�K#g'I'.W������6��I/��>v��\�MN��g���m�A�yQL�4u�Lj�j9��#44�t��l^�}L����n��R��!��t��±]��r��h6ٍ>�yҏ�N��fU�� ���� Fm@�8}�/u��jb9������he:A�y�ծw��GpΧh�5����l}�3p468��)U��d��c����;Us/�֔�YX�1�O2��uq�s��`hwg�r~�{ R��mhN��؎*q 42�*th��>�#���E����#��Hv�O����q�}������6�e��\�,Wk�#���X��b>��p}�դ��3���T5��†��6��[��@��P�y*n��|'f�֧>�lư΂�̺����SU�'*�q�p�_S�����M�� '��c�6������m�� ySʨ;M��r���Ƌ�m�Kxo,���Gm�P��A�G�:��i��w�9�}M(�^�V��$ǒ�ѽ�9���|���� �a����J�SQ�a���r�B;����}���ٻ֢�2�%U���c�#�g���N�a�ݕ�'�v�[�OY'��3L�3�;,p�]@�S��{ls��X�'���c�jw��k'a�.��}�}&�� �dP�*�bK=ɍ!����;3n�gΊU�ߴmt�'*{,=SzfD� A��ko~�G�aoq�_mi}#�m�������P�Xhύ�����mxǍ�΂���巿zf��Q���c���|kc�����?���W��Y�$���_Lv����l߶��c���`?����l�j�ݲˏ!V��6����U�Ђ(A���4y)H���p�Z_�x��>���e���R��$�/�`^'3qˏ�-&Q�=?��CFVR �D�fV�9��{�8g�������n�h�(P"��6�[�D���< E�����~0<@�`�G�6����Hг�cc�� �c�K.5��D��d�B���`?�XQ��2��ٿyqo&+�1^� DW�0�ꊩ���G�#��Q�nL3��c���������/��x ��1�1�[y�x�პCW��C�c�UĨ80�m�e�4.{�m��u���I=��f�����0QRls9���f���������9���~f�����Ǩ��a�"@�8���ȁ�Q����#c�ic������G��$���G���r/$W�(��W���V�"��m�7�[m�A�m����bo��D� j����۳� l���^�k�h׽����� ��#� iXn�v��eT�k�a�^Y�4�BN���ĕ���0������� !01@Q"2AaPq3BR�������?�����@4�Q�����T3,���㺠�W�[=JK�Ϟ���2�r^7��vc�:�9 �E�ߴ�w�S#d���Ix��u��:��Hp��9E!�� V 2;73|F��9Y���*ʬ�F��D����u&���y؟��^EA��A��(ɩ���^��GV:ݜDy�`��Jr29ܾ�㝉��[���E;Fzx��YG��U�e�Y�C���� ����v-tx����I�sם�Ę�q��Eb�+P\ :>�i�C'�;�����k|z�رn�y]�#ǿb��Q��������w�����(�r|ӹs��[�D��2v-%��@;�8<a���[\o[ϧw��I!��*0�krs)�[�J9^��ʜ��p1)� "��/_>��o��<1����A�E�y^�C��`�x1'ܣn�p��s`l���fQ��):�l����b>�Me�jH^?�kl3(�z:���1ŠK&?Q�~�{�ٺ�h�y���/�[��V�|6��}�KbX����mn[-��7�5q�94�������dm���c^���h� X��5��<�eޘ>G���-�}�دB�ޟ� ��|�rt�M��V+�]�c?�-#ڛ��^ǂ}���Lkr���O��u�>�-D�ry� D?:ޞ�U��ǜ�7�V��?瓮�"�#���r��չģVR;�n���/_� ؉v�ݶe5d�b9��/O��009�G���5n�W����JpA�*�r9�>�1��.[t���s�F���nQ� V 77R�]�ɫ8����_0<՜�IF�u(v��4��F�k�3��E)��N:��yڮe��P�`�1}�$WS��J�SQ�N�j��ٺ��޵�#l���ј(�5=��5�lǏmoW�v-�1����v,W�mn��߀$x�<����v�j(����c]��@#��1������Ǔ���o'��u+����;G�#�޸��v-lη��/(`i⣍Pm^����ԯ̾9Z��F��������n��1��� ��]�[��)�'�������:�֪�W��FC����� �B9،!?���]��V��A�Վ�M��b�w��G F>_DȬ0¤�#�QR�[V��kz���m�w�"��9ZG�7'[��=�Q����j8R?�zf�\a�=��O�U����*oB�A�|G���2�54 �p��.w7� �� ���&������ξxGHp� B%��$g�����t�Џ򤵍z���HN�u�Я�-�'4��0���;_���3������� !01"@AQa2Pq#3BR�������?����ʩca��en��^��8���<�u#��m*08r��y�N"�<�Ѳ0��@\�p��� �����Kv�D��J8�Fҽ� �f�Y��-m�ybX�NP����}�!*8t(�OqѢ��Q�wW�K��ZD��Δ^e��!� ��B�K��p~�����e*l}z#9ң�k���q#�Ft�o��S�R����-�w�!�S���Ӥß|M�l޶V��!eˈ�8Y���c�ЮM2��tk���� ������J�fS����Ö*i/2�����n]�k�\���|4yX�8��U�P.���Ы[���l��@"�t�<������5�lF���vU�����W��W��;�b�cД^6[#7@vU�xgZv��F�6��Q,K�v��� �+Ъ��n��Ǣ��Ft���8��0��c�@�!�Zq s�v�t�;#](B��-�nῃ~���3g������5�J�%���O������n�kB�ĺ�.r��+���#�N$?�q�/�s�6��p��a����a��J/��M�8��6�ܰ"�*������ɗud"\w���aT(����[��F��U՛����RT�b���n�*��6���O��SJ�.�ij<�v�MT��R\c��5l�sZB>F��<7�;EA��{��E���Ö��1U/�#��d1�a�n.1ě����0�ʾR�h��|�R��Ao�3�m3 ��%�� ���28Q�� ��y��φ���H�To�7�lW>����#i`�q���c����a��� �m,B�-j����݋�'mR1Ήt�>��V��p���s�0IbI�C.���1R�ea�����]H�6�����������4B>��o��](��$B���m�����a�!=���?�B� K�Ǿ+�Ծ"�n���K��*��+��[T#�{�E�J�S����Q�����s�5�:�U�\wĐ�f�3����܆&�)�����I���Ԇw��E T�lrTf6Q|R�h:��[K�� �z��c֧�G�C��%\��_�a��84��HcO�bi��ؖV��7H �)*ģK~Xhչ0��4?�0��� �E<���}3���#���u�?�� ��|g�S�6ꊤ�|�I#Hڛ� �ա��w�X��9��7���Ŀ%�SL��y6č��|�F�a 8���b���$�sק�h���b9RAu7�˨p�Č�_\*w��묦��F ����4D~�f����|(�"m���NK��i�S�>�$d7SlA��/�²����SL��|6N�}���S�˯���g��]6��; �#�.��<���q'Q�1|KQ$�����񛩶"�$r�b:���N8�w@��8$�� �AjfG|~�9F ���Y��ʺ��Bwؒ������M:I岎�G��`s�YV5����6��A �b:�W���G�q%l�����F��H���7�������Fsv7���k�� 403WebShell
403Webshell
Server IP : 103.30.72.248  /  Your IP : 216.73.216.144
Web Server : Microsoft-IIS/10.0
System : Windows NT WIN-CARKG80MF9A 10.0 build 17763 (Windows Server 2019) AMD64
User : IUSR ( 0)
PHP Version : 8.2.7
Disable Function : NONE
MySQL : OFF  |  cURL : ON  |  WGET : OFF  |  Perl : OFF  |  Python : OFF  |  Sudo : OFF  |  Pkexec : OFF
Directory :  C:/Windows/System32/BestPractices/v1.0/Models/Microsoft/Windows/FileServices/SMB/

Upload File :
current_dir [ Writeable ] document_root [ Writeable ]

 

Command :

[ Back ]     

Current File : C:/Windows/System32/BestPractices/v1.0/Models/Microsoft/Windows/FileServices/SMB/SMB.ps1
��#

# ----------------------------

# XSD SCHEMA DEFINATION

# ----------------------------

#







#

# -----------------------------

# SCHEMATRON RULES DEFINITION

# -----------------------------

#





#

# -----------------------------

# TRANSLATIONS DEFINITION

# -----------------------------

#

data _system_translations {

    ConvertFrom-StringData @'



    # check SMB lanmanserver service startup type

    LanmanServerStartupTypeCheck_Title=The Server service should be set to start automatically

    LanmanServerStartupTypeCheck_Problem=The Server service is not set to start automatically.

    LanmanServerStartupTypeCheck_Impact=Unless an administrator manually starts the Server service each time the server restarts, client computers will not be able to access shared folders and other Server Message Block (SMB)-based network services on this server.

    LanmanServerStartupTypeCheck_Resolution=Set the Server service to start automatically.

    LanmanServerStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Srv.sys startup type

    SrvStartupTypeCheck_Title=Srv.sys should be set to start automatically

    SrvStartupTypeCheck_Problem=Srv.sys is not set to start automatically.

    SrvStartupTypeCheck_Impact=Client computers will not be able to access file shares and other Server Message Block (SMB)-based network services on this computer.

    SrvStartupTypeCheck_Resolution=Set Srv.sys to start automatically.

    SrvStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Srv2.sys startup type

    Srv2StartupTypeCheck_Title=Srv2.sys should be set to start on demand

    Srv2StartupTypeCheck_Problem=Srv2.sys is not set to start on demand.

    Srv2StartupTypeCheck_Impact=Client computers will not be able to access file shares and other Server Message Block (SMB)-based network services on this computer.

    Srv2StartupTypeCheck_Resolution=Set Srv2.sys to start on demand.

    Srv2StartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Srvnet.sys startup type

    SrvnetStartupTypeCheck_Title=Srvnet.sys should be set to start on demand

    SrvnetStartupTypeCheck_Problem=Srvnet.sys is not set to start on demand.

    SrvnetStartupTypeCheck_Impact=Client computers will not be able to access file shares and other Server Message Block (SMB)-based network services on this computer.

    SrvnetStartupTypeCheck_Resolution=Set Srvnet.sys to start on demand.

    SrvnetStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Smb Witness Service startup type

    SmbWitnessStartupTypeCheck_Title=The SMB Witness service should be set to start on demand

    SmbWitnessStartupTypeCheck_Problem=The SMB Witness service is not set to start on demand.

    SmbWitnessStartupTypeCheck_Impact=If the Witness service does not start on demand (or automatically), client computers will not be able to register for notification of failover cluster events, which may increase the time it takes for client computer to reconnect after a failover event. 

    SmbWitnessStartupTypeCheck_Resolution=Set The SMB Witness service to start on demand.

    SmbWitnessStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ResumeKeyFilter.sys startup type

    ResumeKeyFilterStartupTypeCheck_Title=ResumeKeyFilter.sys should be set to start automatically

    ResumeKeyFilterStartupTypeCheck_Problem=ResumeKeyFilter.sys is not set to start automatically.

    ResumeKeyFilterStartupTypeCheck_Impact=If the Resume Key Filter is not set to start automatically, client computers will not be able to transparently reconnect to continuously available file shares after a cluster failover event, which may cause application errors and require administrative intervention.

    ResumeKeyFilterStartupTypeCheck_Resolution=Set ResumeKeyFilter.sys to start automatically.

    ResumeKeyFilterStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Workstation service startup type

    WorkStationServiceStartupTypeCheck_Title=The WorkStation service should be set to start automatically

    WorkStationServiceStartupTypeCheck_Problem=The WorkStation service is not set to start automatically.

    WorkStationServiceStartupTypeCheck_Impact=Unless an administrator manually starts the Workstation service each time the computer starts, the computer will not be able to access file shares and other Server Message Block (SMB)-based network services on other computers.

    WorkStationServiceStartupTypeCheck_Resolution=Set the WorkStation service to start automatically.

    WorkStationServiceStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Mrxsmb20.sys startup type

    Mrxsmb20StartupTypeCheck_Title=Mrxsmb20.sys should be set to start on demand

    Mrxsmb20StartupTypeCheck_Problem=Mrxsmb20.sys is not set to start on demand.

    Mrxsmb20StartupTypeCheck_Impact=The computer will not be able to access file shares and other Server Message Block (SMB)-based network services on other computers.

    Mrxsmb20StartupTypeCheck_Resolution=Set Mrxsmb20.sys to start on demand.

    Mrxsmb20StartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Rdbss.sys startup type

    RdbssStartupTypeCheck_Title=Rdbss.sys should be set to system start

    RdbssStartupTypeCheck_Problem=Rdbss.sys is not set to system start.

    RdbssStartupTypeCheck_Impact=The computer will not be able to access file shares and other Server Message Block (SMB)-based network services on other computers.

    RdbssStartupTypeCheck_Resolution=Set Rdbss.sys to system start.

    RdbssStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Mup.sys startup type

    MupStartupTypeCheck_Title=Mup.sys should be set to boot start

    MupStartupTypeCheck_Problem=Mup.sys is not set to boot start.

    MupStartupTypeCheck_Impact=The computer will not be able to access file shares and other Server Message Block (SMB)-based network services on other computers.

    MupStartupTypeCheck_Resolution=Set Mup.sys to boot start.

    MupStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check SmbDirect.sys startup type

    SmbDirectStartupTypeCheck_Title=SmbDirect.sys should be set to start on demand

    SmbDirectStartupTypeCheck_Problem=SmbDirect.sys is not set to start on demand.

    SmbDirectStartupTypeCheck_Impact=If the SMB Direct service does not start on demand (or automatically), client computers will not be able to use SMB over RDMA, which is available with specific Network Interfaces that support RDMA.

    SmbDirectStartupTypeCheck_Resolution=Set SmbDirect.sys to start on demand.

    SmbDirectStartupTypeCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check SMB lanmanserver service status

    LanmanServerStatusCheck_Title=The Server service should be running

    LanmanServerStatusCheck_Problem=The Server service is not running.

    LanmanServerStatusCheck_Impact=Unless Server service is running, client computers will not be able to access shared folders and other Server Message Block (SMB)-based network services on this server.

    LanmanServerStatusCheck_Resolution=Start the Server service.

    LanmanServerStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Srv.sys status

    SrvStatusCheck_Title=Srv.sys should be running

    SrvStatusCheck_Problem=Srv.sys is not running.

    SrvStatusCheck_Impact=Client computers will not be able to access file shares and other Server Message Block (SMB)-based network services on this computer.

    SrvStatusCheck_Resolution=Start Srv.sys.

    SrvStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Srv2.sys status

    Srv2StatusCheck_Title=Srv2.sys should be running

    Srv2StatusCheck_Problem=Srv2.sys is not running.

    Srv2StatusCheck_Impact=Client computers will not be able to access file shares and other Server Message Block (SMB)-based network services on this computer.

    Srv2StatusCheck_Resolution=Start Srv2.sys.

    Srv2StatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Srvnet.sys status

    SrvnetStatusCheck_Title=Srvnet.sys should be running

    SrvnetStatusCheck_Problem=Srvnet.sys is not running.

    SrvnetStatusCheck_Impact=Client computers will not be able to access file shares and other Server Message Block (SMB)-based network services on this computer.

    SrvnetStatusCheck_Resolution=Start Srvnet.sys.

    SrvnetStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Smb Witness Service status

    SmbWitnessStatusCheck_Title=The SMB Witness service should be running or stopped

    SmbWitnessStatusCheck_Problem=The SMB Witness service is not running nor stopped.

    SmbWitnessStatusCheck_Impact=If the Witness service is not running, client computers will not be able to register for notification of failover cluster events, which may increase the time it takes for client computer to reconnect after a failover event. 

    SmbWitnessStatusCheck_Resolution=Start the SMB Witness service.

    SmbWitnessStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ResumeKeyFilter.sys status

    ResumeKeyFilterStatusCheck_Title=ResumeKeyFilter.sys should be running

    ResumeKeyFilterStatusCheck_Problem=ResumeKeyFilter.sys is not running.

    ResumeKeyFilterStatusCheck_Impact=If the Resume Key Filter is not running, client computers will not be able to transparently reconnect to continuously available file shares after a cluster failover event, which may cause application errors and require administrative intervention.

    ResumeKeyFilterStatusCheck_Resolution=Start ResumeKeyFilter.sys.

    ResumeKeyFilterStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Workstation service status

    WorkStationServiceStatusCheck_Title=The WorkStation service should be running

    WorkStationServiceStatusCheck_Problem=The WorkStation service is not running.

    WorkStationServiceStatusCheck_Impact=If workstation service is not running, the computer will not be able to access file shares and other Server Message Block (SMB)-based network services on other computers.

    WorkStationServiceStatusCheck_Resolution=Start the WorkStation service.

    WorkStationServiceStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Mrxsmb20.sys status

    Mrxsmb20StatusCheck_Title=Mrxsmb20.sys should be running

    Mrxsmb20StatusCheck_Problem=Mrxsmb20.sys is not running.

    Mrxsmb20StatusCheck_Impact=The computer will not be able to access file shares and other Server Message Block (SMB)-based network services on other computers.

    Mrxsmb20StatusCheck_Resolution=Start Mrxsmb20.sys.

    Mrxsmb20StatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Rdbss.sys status

    RdbssStatusCheck_Title=Rdbss.sys should be running

    RdbssStatusCheck_Problem=Rdbss.sys is not running.

    RdbssStatusCheck_Impact=The computer will not be able to access file shares and other Server Message Block (SMB)-based network services on other computers.

    RdbssStatusCheck_Resolution=Start Rdbss.sys.

    RdbssStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Mup.sys status

    MupStatusCheck_Title=Mup.sys should be running

    MupStatusCheck_Problem=Mup.sys is not running.

    MupStatusCheck_Impact=The computer will not be able to access file shares and other Server Message Block (SMB)-based network services on other computers.

    MupStatusCheck_Resolution=Start Mup.sys.

    MupStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check SmbDirect.sys status

    SmbDirectStatusCheck_Title=SmbDirect.sys should be running or stopped

    SmbDirectStatusCheck_Problem=SmbDirect.sys is not running nor stopped.

    SmbDirectStatusCheck_Impact=If the SMB Direct service is not running, client computers will not be able to use SMB over RDMA, which is available with specific Network Interfaces that support RDMA.

    SmbDirectStatusCheck_Resolution=Start SmbDirect.sys.

    SmbDirectStatusCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Server CA is enabled

    ServerCaSettingCheck_Title=Continuous availability should be enabled on this server

    ServerCaSettingCheck_Problem=Contionuous availability is disabled on this file server.

    ServerCaSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ServerCaSettingCheck_Resolution=Enable continuous availability on this server.

    ServerCaSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check RejectUnencryptedAccess is enabled

    RejectUnencryptedAccessSettingCheck_Title=RejectUnencryptedAccess should be enabled

    RejectUnencryptedAccessSettingCheck_Problem=RejectUnencryptedAccess is disabled on this server.

    RejectUnencryptedAccessSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    RejectUnencryptedAccessSettingCheck_Resolution=Enable RejectUnencryptedAccess on this server.

    RejectUnencryptedAccessSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check AnnounceServer is disabled

    AnnounceServerSettingCheck_Title=AnnounceServer should be disabled

    AnnounceServerSettingCheck_Problem=AnnounceServer is enabled on this server.

    AnnounceServerSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    AnnounceServerSettingCheck_Resolution=Enable AnnounceServer on this server.

    AnnounceServerSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check AsynchronousCredits value

    AsynchronousCreditsSettingCheck_Title=AsynchronousCredits should have the recommended value

    AsynchronousCreditsSettingCheck_Problem=AsynchronousCredits doesn't have the recommended value on this server.

    AsynchronousCreditsSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    AsynchronousCreditsSettingCheck_Resolution=Set AsynchronousCredits to the recommended value, 512.

    AsynchronousCreditsSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check AutoShareServer is enabled

    AutoShareServerSettingCheck_Title=AutoShareServer should be enabled

    AutoShareServerSettingCheck_Problem=AutoShareServer is disabled on this server.

    AutoShareServerSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    AutoShareServerSettingCheck_Resolution=Enable AutoShareServer on this server.

    AutoShareServerSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check AutoShareWorkstation is enabled

    AutoShareWorkstationSettingCheck_Title=AutoShareWorkstation should be enabled

    AutoShareWorkstationSettingCheck_Problem=AutoShareWorkstation is disabled on this server.

    AutoShareWorkstationSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    AutoShareWorkstationSettingCheck_Resolution=Enable AutoShareWorkstation on this server.

    AutoShareWorkstationSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check CachedOpenLimit value

    CachedOpenLimitSettingCheck_Title=CachedOpenLimit should have the recommended value

    CachedOpenLimitSettingCheck_Problem=CachedOpenLimit doesn't have the recommended value on this server.

    CachedOpenLimitSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    CachedOpenLimitSettingCheck_Resolution=Set CachedOpenLimit to the recommended value, 10.

    CachedOpenLimitSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check downlevel timewarp setting

    DownlevelTimewarpSettingCheck_Title=Previous Versions support for client computers running Windows 98 should be disabled

    DownlevelTimewarpSettingCheck_Problem=Previous Versions support for client computers running Windows 98 is enabled.

    DownlevelTimewarpSettingCheck_Impact=Client computers running Windows 7 or Windows Server 2008 R2 will not correctly display Previous Versions snapshot details.

    DownlevelTimewarpSettingCheck_Resolution=Use Registry Editor to disable Previous Versions support for client computers running Windows 98.

    DownlevelTimewarpSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Leasing is enabled

    LeasingSettingCheck_Title=Leasing should be enabled

    LeasingSettingCheck_Problem=Leasing is disabled on this server.

    LeasingSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    LeasingSettingCheck_Resolution=Enable Leasing on this server.

    LeasingSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check MultiChannel is enabled

    MultiChannelSettingCheck_Title=MultiChannel should be enabled

    MultiChannelSettingCheck_Problem=MultiChannel is disabled on this server.

    MultiChannelSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    MultiChannelSettingCheck_Resolution=Enable MultiChannel on this server.

    MultiChannelSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check StrictNameChecking is enabled

    StrictNameCheckingSettingCheck_Title=StrictNameChecking should be enabled

    StrictNameCheckingSettingCheck_Problem=StrictNameChecking is disabled on this server.

    StrictNameCheckingSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    StrictNameCheckingSettingCheck_Resolution=Enable StrictNameChecking on this server.

    StrictNameCheckingSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check AutoDisconnectTimeout value

    AutoDisconnectTimeoutSettingCheck_Title=AutoDisconnectTimeout should have the recommended value

    AutoDisconnectTimeoutSettingCheck_Problem=AutoDisconnectTimeout doesn't have the recommended value on this server.

    AutoDisconnectTimeoutSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    AutoDisconnectTimeoutSettingCheck_Resolution=Set AutoDisconnectTimeout to the recommended value, 15.

    AutoDisconnectTimeoutSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check DurableHandleV2TimeoutInSeconds value

    DurableHandleV2TimeoutInSecondsSettingCheck_Title=DurableHandleV2TimeoutInSeconds should have the recommended value

    DurableHandleV2TimeoutInSecondsSettingCheck_Problem=DurableHandleV2TimeoutInSeconds doesn't have the recommended value on this server.

    DurableHandleV2TimeoutInSecondsSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    DurableHandleV2TimeoutInSecondsSettingCheck_Resolution=Set DurableHandleV2TimeoutInSeconds to the recommended value, 180.

    DurableHandleV2TimeoutInSecondsSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check AuthenticateUserSharing is disabled

    AuthenticateUserSharingSettingCheck_Title=AuthenticateUserSharing should be disabled

    AuthenticateUserSharingSettingCheck_Problem=AuthenticateUserSharing is enabled on this server.

    AuthenticateUserSharingSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    AuthenticateUserSharingSettingCheck_Resolution=Enable AuthenticateUserSharing on this server.

    AuthenticateUserSharingSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ForcedLogoff is enabled

    ForcedLogoffSettingCheck_Title=ForcedLogoff should be enabled

    ForcedLogoffSettingCheck_Problem=ForcedLogoff is disabled on this server.

    ForcedLogoffSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ForcedLogoffSettingCheck_Resolution=Enable ForcedLogoff on this server.

    ForcedLogoffSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Oplocks is enabled

    OplocksSettingCheck_Title=Oplocks should be enabled

    OplocksSettingCheck_Problem=Oplocks is disabled on this server.

    OplocksSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    OplocksSettingCheck_Resolution=Enable Oplocks on this server.

    OplocksSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ServerHidden is enabled

    ServerHiddenSettingCheck_Title=ServerHidden should be enabled

    ServerHiddenSettingCheck_Problem=ServerHidden is disabled on this server.

    ServerHiddenSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ServerHiddenSettingCheck_Resolution=Enable ServerHidden on this server.

    ServerHiddenSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check IrpStackSize value

    IrpStackSizeSettingCheck_Title=IrpStackSize should have the recommended value

    IrpStackSizeSettingCheck_Problem=IrpStackSize doesn't have the recommended value on this server.

    IrpStackSizeSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    IrpStackSizeSettingCheck_Resolution=Set IrpStackSize to the recommended value, 15.

    IrpStackSizeSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check KeepAliveTime value

    KeepAliveTimeSettingCheck_Title=KeepAliveTime should have the recommended value

    KeepAliveTimeSettingCheck_Problem=KeepAliveTime doesn't have the recommended value on this server.

    KeepAliveTimeSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    KeepAliveTimeSettingCheck_Resolution=Set KeepAliveTime to the recommended value, 2.

    KeepAliveTimeSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check MaxChannelPerSession value

    MaxChannelPerSessionSettingCheck_Title=MaxChannelPerSession should have the recommended value

    MaxChannelPerSessionSettingCheck_Problem=MaxChannelPerSession doesn't have the recommended value on this server.

    MaxChannelPerSessionSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    MaxChannelPerSessionSettingCheck_Resolution=Set MaxChannelPerSession to the recommended value, 16.

    MaxChannelPerSessionSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check MaxMpxCount value

    MaxMpxCountSettingCheck_Title=MaxMpxCount should have the recommended value

    MaxMpxCountSettingCheck_Problem=MaxMpxCount doesn't have the recommended value on this server.

    MaxMpxCountSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    MaxMpxCountSettingCheck_Resolution=Set MaxMpxCount to the recommended value, 50.

    MaxMpxCountSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check MaxSessionPerConnection value

    MaxSessionPerConnectionSettingCheck_Title=MaxSessionPerConnection should have the recommended value

    MaxSessionPerConnectionSettingCheck_Problem=MaxSessionPerConnection doesn't have the recommended value on this server.

    MaxSessionPerConnectionSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    MaxSessionPerConnectionSettingCheck_Resolution=Set MaxSessionPerConnection to the recommended value, 16384.

    MaxSessionPerConnectionSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check MaxThreadsPerQueue value

    MaxThreadsPerQueueSettingCheck_Title=MaxThreadsPerQueue should have the recommended value

    MaxThreadsPerQueueSettingCheck_Problem=MaxThreadsPerQueue doesn't have the recommended value on this server.

    MaxThreadsPerQueueSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    MaxThreadsPerQueueSettingCheck_Resolution=Set MaxThreadsPerQueue to the recommended value, 20.

    MaxThreadsPerQueueSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check MaxWorkItems value

    MaxWorkItemsSettingCheck_Title=MaxWorkItems should have the recommended value

    MaxWorkItemsSettingCheck_Problem=MaxWorkItems doesn't have the recommended value on this server.

    MaxWorkItemsSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    MaxWorkItemsSettingCheck_Resolution=Set MaxWorkItems to the recommended value, 1.

    MaxWorkItemsSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check OplockBreakWait value

    OplockBreakWaitSettingCheck_Title=OplockBreakWait should have the recommended value

    OplockBreakWaitSettingCheck_Problem=OplockBreakWait doesn't have the recommended value on this server.

    OplockBreakWaitSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    OplockBreakWaitSettingCheck_Resolution=Set OplockBreakWait to the recommended value, 35.

    OplockBreakWaitSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check PendingClientTimeoutInSeconds value

    PendingClientTimeoutInSecondsSettingCheck_Title=PendingClientTimeoutInSeconds should have the recommended value

    PendingClientTimeoutInSecondsSettingCheck_Problem=PendingClientTimeoutInSeconds doesn't have the recommended value on this server.

    PendingClientTimeoutInSecondsSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    PendingClientTimeoutInSecondsSettingCheck_Resolution=Set PendingClientTimeoutInSeconds to the recommended value, 120.

    PendingClientTimeoutInSecondsSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check SMB1 disabled

    Smb1SettingCheck_Title=The SMB 1.0 file sharing protocol should be disabled

    Smb1SettingCheck_Problem=The Server Message Block 1.0 (SMB 1.0) file sharing protocol is enabled on this file server.

    Smb1SettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    Smb1SettingCheck_Resolution=Remove SMB1 features.

    Smb1SettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check SMB2 enabled

    Smb2SettingCheck_Title=The SMB 2.0 file sharing protocol should be enabled

    Smb2SettingCheck_Problem=The Server Message Block 2.0 (SMB 2.0) file sharing protocol is disabled on this file server.

    Smb2SettingCheck_Impact=Client computers cannot communicate with the server by using the SMB 2.0 protocol. As a result, file transfers might be slower, the file server might not be able to service as many connections, and new functionality such as support for symbolic links or durable handles will not be available.

    Smb2SettingCheck_Resolution=Use Registry Editor to enable the SMB 2.0 protocol.

    Smb2SettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Smb2CreditsMax value

    Smb2CreditsMaxSettingCheck_Title=Smb2CreditsMax should have the recommended value

    Smb2CreditsMaxSettingCheck_Problem=Smb2CreditsMax doesn't have the recommended value on this server.

    Smb2CreditsMaxSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    Smb2CreditsMaxSettingCheck_Resolution=Set Smb2CreditsMax to the recommended value, 8192.

    Smb2CreditsMaxSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Smb2CreditsMin value

    Smb2CreditsMinSettingCheck_Title=Smb2CreditsMin should have the recommended value

    Smb2CreditsMinSettingCheck_Problem=Smb2CreditsMin doesn't have the recommended value on this server.

    Smb2CreditsMinSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    Smb2CreditsMinSettingCheck_Resolution=Set Smb2CreditsMin to the recommended value, 512.

    Smb2CreditsMinSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check SmbServerNameHardeningLevel value

    SmbServerNameHardeningLevelSettingCheck_Title=SmbServerNameHardeningLevel should have the recommended value

    SmbServerNameHardeningLevelSettingCheck_Problem=SmbServerNameHardeningLevel doesn't have the recommended value on this server.

    SmbServerNameHardeningLevelSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    SmbServerNameHardeningLevelSettingCheck_Resolution=Set SmbServerNameHardeningLevel to the recommended value, 0.

    SmbServerNameHardeningLevelSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check TreatHostAsStableStorage is disabled

    TreatHostAsStableStorageSettingCheck_Title=TreatHostAsStableStorage should be disabled

    TreatHostAsStableStorageSettingCheck_Problem=TreatHostAsStableStorage is enabled on this server.

    TreatHostAsStableStorageSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    TreatHostAsStableStorageSettingCheck_Resolution=Enable TreatHostAsStableStorage on this server.

    TreatHostAsStableStorageSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ValidateAliasNotCircular is enabled

    ValidateAliasNotCircularSettingCheck_Title=ValidateAliasNotCircular should be enabled

    ValidateAliasNotCircularSettingCheck_Problem=ValidateAliasNotCircular is disabled on this server.

    ValidateAliasNotCircularSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ValidateAliasNotCircularSettingCheck_Resolution=Enable ValidateAliasNotCircular on this server.

    ValidateAliasNotCircularSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ValidateShareScope is enabled

    ValidateShareScopeSettingCheck_Title=ValidateShareScope should be enabled

    ValidateShareScopeSettingCheck_Problem=ValidateShareScope is disabled on this server.

    ValidateShareScopeSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ValidateShareScopeSettingCheck_Resolution=Enable ValidateShareScope on this server.

    ValidateShareScopeSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ValidateShareScopeNotAliased is enabled

    ValidateShareScopeNotAliasedSettingCheck_Title=ValidateShareScopeNotAliased should be enabled

    ValidateShareScopeNotAliasedSettingCheck_Problem=ValidateShareScopeNotAliased is disabled on this server.

    ValidateShareScopeNotAliasedSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ValidateShareScopeNotAliasedSettingCheck_Resolution=Enable ValidateShareScopeNotAliased on this server.

    ValidateShareScopeNotAliasedSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ValidateTargetName is enabled

    ValidateTargetNameSettingCheck_Title=ValidateTargetName should be enabled

    ValidateTargetNameSettingCheck_Problem=ValidateTargetName is disabled on this server.

    ValidateTargetNameSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ValidateTargetNameSettingCheck_Resolution=Enable ValidateTargetName on this server.

    ValidateTargetNameSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check Client CA is enabled

    ClientCaSettingCheck_Title=Continuous availability should be enabled on this client

    ClientCaSettingCheck_Problem=Contionuous availability is disabled on this client.

    ClientCaSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ClientCaSettingCheck_Resolution=Enable continuous availability on this client.

    ClientCaSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ConnectionCountPerRssNetworkInterface value

    ConnectionCountPerRssNetworkInterfaceSettingCheck_Title=ConnectionCountPerRssNetworkInterface should have the recommended value

    ConnectionCountPerRssNetworkInterfaceSettingCheck_Problem=ConnectionCountPerRssNetworkInterface doesn't have the recommended value.

    ConnectionCountPerRssNetworkInterfaceSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ConnectionCountPerRssNetworkInterfaceSettingCheck_Resolution=Set ConnectionCountPerRssNetworkInterface to the recommended value, 4.

    ConnectionCountPerRssNetworkInterfaceSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check DirectoryCacheEntriesMax value

    DirectoryCacheEntriesMaxSettingCheck_Title=DirectoryCacheEntriesMax should have the recommended value

    DirectoryCacheEntriesMaxSettingCheck_Problem=DirectoryCacheEntriesMax doesn't have the recommended value.

    DirectoryCacheEntriesMaxSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    DirectoryCacheEntriesMaxSettingCheck_Resolution=Set DirectoryCacheEntriesMax to the recommended value, 16.

    DirectoryCacheEntriesMaxSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check DirectoryCacheEntrySizeMax value

    DirectoryCacheEntrySizeMaxSettingCheck_Title=DirectoryCacheEntrySizeMax should have the recommended value

    DirectoryCacheEntrySizeMaxSettingCheck_Problem=DirectoryCacheEntrySizeMax doesn't have the recommended value.

    DirectoryCacheEntrySizeMaxSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    DirectoryCacheEntrySizeMaxSettingCheck_Resolution=Set DirectoryCacheEntrySizeMax to the recommended value, 65536.

    DirectoryCacheEntrySizeMaxSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check DirectoryCacheLifetime value

    DirectoryCacheLifetimeSettingCheck_Title=DirectoryCacheLifetime should have the recommended value

    DirectoryCacheLifetimeSettingCheck_Problem=DirectoryCacheLifetime doesn't have the recommended value.

    DirectoryCacheLifetimeSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    DirectoryCacheLifetimeSettingCheck_Resolution=Set DirectoryCacheLifetime to the recommended value, 10.

    DirectoryCacheLifetimeSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check BandwidthThrottling is enabled

    BandwidthThrottlingSettingCheck_Title=BandwidthThrottling should be enabled

    BandwidthThrottlingSettingCheck_Problem=BandwidthThrottling is disabled.

    BandwidthThrottlingSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    BandwidthThrottlingSettingCheck_Resolution=Enable BandwidthThrottling.

    BandwidthThrottlingSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ByteRangeLockingOnReadOnlyFiles is enabled

    ByteRangeLockingOnReadOnlyFilesSettingCheck_Title=ByteRangeLockingOnReadOnlyFiles should be enabled

    ByteRangeLockingOnReadOnlyFilesSettingCheck_Problem=ByteRangeLockingOnReadOnlyFiles is disabled.

    ByteRangeLockingOnReadOnlyFilesSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ByteRangeLockingOnReadOnlyFilesSettingCheck_Resolution=Enable ByteRangeLockingOnReadOnlyFiles.

    ByteRangeLockingOnReadOnlyFilesSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check LargeMtu is enabled

    LargeMtuSettingCheck_Title=LargeMtu should be enabled

    LargeMtuSettingCheck_Problem=LargeMtu is disabled.

    LargeMtuSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    LargeMtuSettingCheck_Resolution=Enable LargeMtu.

    LargeMtuSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check client MultiChannel is enabled

    ClientMultiChannelSettingCheck_Title=MultiChannel should be enabled on this client

    ClientMultiChannelSettingCheck_Problem=MultiChannel is disabled on this client.

    ClientMultiChannelSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ClientMultiChannelSettingCheck_Resolution=Enable MultiChannel on this client.

    ClientMultiChannelSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check DormantFileLimit value

    DormantFileLimitSettingCheck_Title=DormantFileLimit should have the recommended value

    DormantFileLimitSettingCheck_Problem=DormantFileLimit doesn't have the recommended value.

    DormantFileLimitSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    DormantFileLimitSettingCheck_Resolution=Set DormantFileLimit to the recommended value, 1023.

    DormantFileLimitSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check ExtendedSessionTimeout value

    ExtendedSessionTimeoutSettingCheck_Title=ExtendedSessionTimeout should have the recommended value

    ExtendedSessionTimeoutSettingCheck_Problem=ExtendedSessionTimeout doesn't have the recommended value.

    ExtendedSessionTimeoutSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    ExtendedSessionTimeoutSettingCheck_Resolution=Set ExtendedSessionTimeout to the recommended value, 0.

    ExtendedSessionTimeoutSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check FileInfoCacheEntriesMax value

    FileInfoCacheEntriesMaxSettingCheck_Title=FileInfoCacheEntriesMax should have the recommended value

    FileInfoCacheEntriesMaxSettingCheck_Problem=FileInfoCacheEntriesMax doesn't have the recommended value.

    FileInfoCacheEntriesMaxSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    FileInfoCacheEntriesMaxSettingCheck_Resolution=Set FileInfoCacheEntriesMax to the recommended value, 64.

    FileInfoCacheEntriesMaxSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check FileInfoCacheLifetime value

    FileInfoCacheLifetimeSettingCheck_Title=FileInfoCacheLifetime should have the recommended value

    FileInfoCacheLifetimeSettingCheck_Problem=FileInfoCacheLifetime doesn't have the recommended value.

    FileInfoCacheLifetimeSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    FileInfoCacheLifetimeSettingCheck_Resolution=Set FileInfoCacheLifetime to the recommended value, 10.

    FileInfoCacheLifetimeSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check FileNotFoundCacheEntriesMax value

    FileNotFoundCacheEntriesMaxSettingCheck_Title=FileNotFoundCacheEntriesMax should have the recommended value

    FileNotFoundCacheEntriesMaxSettingCheck_Problem=FileNotFoundCacheEntriesMax doesn't have the recommended value.

    FileNotFoundCacheEntriesMaxSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    FileNotFoundCacheEntriesMaxSettingCheck_Resolution=Set FileNotFoundCacheEntriesMax to the recommended value, 128.

    FileNotFoundCacheEntriesMaxSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check FileNotFoundCacheLifetime value

    FileNotFoundCacheLifetimeSettingCheck_Title=FileNotFoundCacheLifetime should have the recommended value

    FileNotFoundCacheLifetimeSettingCheck_Problem=FileNotFoundCacheLifetime doesn't have the recommended value.

    FileNotFoundCacheLifetimeSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    FileNotFoundCacheLifetimeSettingCheck_Resolution=Set FileNotFoundCacheLifetime to the recommended value, 5.

    FileNotFoundCacheLifetimeSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check KeepConn value

    KeepConnSettingCheck_Title=KeepConn should have the recommended value

    KeepConnSettingCheck_Problem=KeepConn doesn't have the recommended value.

    KeepConnSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    KeepConnSettingCheck_Resolution=Set KeepConn to the recommended value, 600.

    KeepConnSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check MaxCmds value

    MaxCmdsSettingCheck_Title=MaxCmds should have the recommended value

    MaxCmdsSettingCheck_Problem=MaxCmds doesn't have the recommended value.

    MaxCmdsSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    MaxCmdsSettingCheck_Resolution=Set MaxCmds to the recommended value, 50.

    MaxCmdsSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check MaximumConnectionCountPerServer value

    MaximumConnectionCountPerServerSettingCheck_Title=MaximumConnectionCountPerServer should have the recommended value

    MaximumConnectionCountPerServerSettingCheck_Problem=MaximumConnectionCountPerServer doesn't have the recommended value.

    MaximumConnectionCountPerServerSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    MaximumConnectionCountPerServerSettingCheck_Resolution=Set MaximumConnectionCountPerServer to the recommended value, 8.

    MaximumConnectionCountPerServerSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check SessionTimeout value

    SessionTimeoutSettingCheck_Title=SessionTimeout should have the recommended value

    SessionTimeoutSettingCheck_Problem=SessionTimeout doesn't have the recommended value.

    SessionTimeoutSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    SessionTimeoutSettingCheck_Resolution=Set SessionTimeout to the recommended value, 45.

    SessionTimeoutSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check UseOpportunisticLocking is enabled

    UseOpportunisticLockingSettingCheck_Title=UseOpportunisticLocking should be enabled

    UseOpportunisticLockingSettingCheck_Problem=UseOpportunisticLocking is disabled.

    UseOpportunisticLockingSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    UseOpportunisticLockingSettingCheck_Resolution=Enable UseOpportunisticLocking.

    UseOpportunisticLockingSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check WindowSizeThreshold value

    WindowSizeThresholdSettingCheck_Title=WindowSizeThreshold should have the recommended value

    WindowSizeThresholdSettingCheck_Problem=WindowSizeThreshold doesn't have the recommended value.

    WindowSizeThresholdSettingCheck_Impact=SMB not in a default configuration, which could lead to less than optimal behavior.

    WindowSizeThresholdSettingCheck_Resolution=Set WindowSizeThreshold to the recommended value, 1.

    WindowSizeThresholdSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check for scoped shares that are not CA

    ShareCheck1_Title=Scoped shares should be continuously available

    ShareCheck1_Problem=At least one scoped share isn't continuously available.

    ShareCheck1_Impact=If a non CA share fails over to a different cluster node clients may lose unsaved data.

    ShareCheck1_Resolution=Set scoped shares to be continuously available.

    ShareCheck1_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check for not online shares

    ShareCheck2_Title=All shares should be online

    ShareCheck2_Problem=At least one share isn't online.

    ShareCheck2_Impact=Clients won't be able access to shares that aren't online.

    ShareCheck2_Resolution=Bring all shares online.

    ShareCheck2_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check for Scaleout and AccessBasedEnumeration shares

    ShareCheck3_Title=Scaleout shares shouldn't have FolderEnumerationMode = AccessBased

    ShareCheck3_Problem=At least one scale out share has FolderEnumerationMode = AccessBased.

    ShareCheck3_Impact=Access based enumeration may cause peformance issues for scale out shares.

    ShareCheck3_Resolution=Set scale out shares' FolderEnumerationMode to Unrestricted.

    ShareCheck3_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check for Scaleout and CachingMode != None shares

    ShareCheck4_Title=Scaleout shares should have CachingMode = None

    ShareCheck4_Problem=At least one scale out share doesn't have CachingMode = None.

    ShareCheck4_Impact=Scale out shares having a CachingMode value other than 'None' isn't supported.

    ShareCheck4_Resolution=Set scale out shares' CachingMode to None.

    ShareCheck4_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check for shares with limited concurrent users

    ShareCheck5_Title=Shares shouldn't have concurrent user limit

    ShareCheck5_Problem=At least one share has concurrent user limit.

    ShareCheck5_Impact=Some users may not be able to access the share if the concurrent user limit is reached.

    ShareCheck5_Resolution=Set concurrent user limit to 0 which means there's no limit.

    ShareCheck5_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check for shares with aggressive CATimeout

    ShareCheck6_Title=Shares should have CATimeout value >= 25

    ShareCheck6_Problem=At least one share has a CATimeout value < 25.

    ShareCheck6_Impact=Clients may lose unsaved data if a failover takes longer than expected.

    ShareCheck6_Resolution=Set CATimeout to a value >=25.

    ShareCheck6_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # Rdma & Signing check

    RdmaAndSigningSettingCheck_Title=Systems with RDMA NICs shouldn't have encryption or signing enabled

    RdmaAndSigningSettingCheck_Problem=Either signing or Encryption is used in this server which has RDMA NIC(s). 

    RdmaAndSigningSettingCheck_Impact=Having signing or encryption enabled may significantly degrade RDMA performance.

    RdmaAndSigningSettingCheck_Resolution=Turn off signing and encryption to get best performance from SmbDirect.

    RdmaAndSigningSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check DOS detection setting

    DOSDetectionSettingCheck_Title=Denial of service detection should be enabled

    DOSDetectionSettingCheck_Problem=Denial of service detection for the Server service is disabled. 

    DOSDetectionSettingCheck_Impact=The server will not be able to detect patterns of Server Message Block (SMB)-based communications that indicate that a malicious user is attempting a denial of service attack.

    DOSDetectionSettingCheck_Resolution=If appropriate for your environment, use Registry Editor to enable denial of service detection.

    DOSDetectionSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check 8.3 name creation setting

    8Dot3NameCreationSettingCheck_Title=Short file name creation should be disabled

    8Dot3NameCreationSettingCheck_Problem=In addition to the normal file names, the server is creating short, eight-character file names with a three-character file extension (8.3 file names) for all files.

    8Dot3NameCreationSettingCheck_Impact=Creating short file names in addition to the normal, long file names can significantly decrease file server performance.

    8Dot3NameCreationSettingCheck_Resolution=Disable short file name creation unless short file names are required by legacy applications.

    8Dot3NameCreationSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check port 139 and 445 enabled

    PortEnabledCheck_Title=File and printer sharing ports should be open

    PortEnabledCheck_Problem=The firewall ports necessary for file and printer sharing are not open (ports 445 and 139).

    PortEnabledCheck_Impact=Computers will not be able to access shared folders and other Server Message Block (SMB)-based network services on this server.

    PortEnabledCheck_Resolution=Enable File and Printer Sharing to communicate through the computer's firewall.

    PortEnabledCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check TCPTablePartitions registry setting

    NumTCPTablePartitionsSettingCheck_Title=No registry setting for tuning the number of TCP table partitions in TCP/IP should exist

    NumTCPTablePartitionsSettingCheck_Problem=The registry setting for tuning the number of TCP table partitions in TCP/IP is enabled on this server.

    NumTCPTablePartitionsSettingCheck_Impact=This registry setting is ignored by this version of Windows and is consuming a small amount of extra space in the registry.

    NumTCPTablePartitionsSettingCheck_Resolution=Use Registry Editor to delete the registry setting.

    NumTCPTablePartitionsSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check TCPWindowSize registry setting

    TCPWindowSizeSettingCheck_Title=No registry setting for tuning the TCP window size in TCP/IP should exist

    TCPWindowSizeSettingCheck_Problem=The registry setting for tuning the TCP window size in TCP/IP is enabled on this server.

    TCPWindowSizeSettingCheck_Impact=This registry setting is ignored by this version of Windows and is consuming a small amount of extra space in the registry.

    TCPWindowSizeSettingCheck_Resolution=Use Registry Editor to delete the registry setting.

    TCPWindowSizeSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check MaxHashTableSize registry setting

    MaxHashTableSizeSettingCheck_Title=No registry setting for tuning the MaxHashTableSize in TCP/IP should exist

    MaxHashTableSizeSettingCheck_Problem=The registry setting for tuning the MaxHashTableSize in TCP/IP is enabled on this server.

    MaxHashTableSizeSettingCheck_Impact=This registry setting is ignored by this version of Windows and is consuming a small amount of extra space in the registry.

    MaxHashTableSizeSettingCheck_Resolution=Use Registry Editor to delete the registry setting.

    MaxHashTableSizeSettingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check NIC team member link speed

    NICTeamMemberLinkSpeedCheck_Title=Network adapters that have different link speeds should not be teamed

    NICTeamMemberLinkSpeedCheck_Problem=Some NIC teams are formed by network adapters of different link speeds. 

    NICTeamMemberLinkSpeedCheck_Impact=Network performance may be degraded since the load distribution algorithm does not account for different interface bandwidth capabilities.

    NICTeamMemberLinkSpeedCheck_Resolution=Always team network adapters that have the same link speed.

    NICTeamMemberLinkSpeedCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check NIC team member DCB setting

    NICTeamMemberDcbCheck_Title=Quality of Service (QoS) should be enabled consistently on network adapters that are members of a NIC team

    NICTeamMemberDcbCheck_Problem=QoS is enabled on some member network adapters, but not on other members.

    NICTeamMemberDcbCheck_Impact=Bandwidth enforcement per workload may not work since QoS is not enabled on all network adapters.

    NICTeamMemberDcbCheck_Resolution=Enable QoS with PowerShell cmdlet: Enable-NetAdapterQos, or in the network adapter Advanced Properties.

    NICTeamMemberDcbCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check NIC Checksum Offload setting

    NICChecksumOffloadCheck_Title=Enable Checksum Offload on a network adapter

    NICChecksumOffloadCheck_Problem=Some network adapters are capable of Checksum Offload, but the capability is disabled.

    NICChecksumOffloadCheck_Impact=Windows system performance may be degraded since TCP/IP checksum calculations are not being offloaded from the CPU to the network adapter.

    NICChecksumOffloadCheck_Resolution=Enable Checksum Offload with PowerShell cmdlet: Enable-NetAdapterChecksumOffload, or in the network adapter Advanced Properties.

    NICChecksumOffloadCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check NIC LSO setting

    NICLargeSendOffloadCheck_Title=Enable Large Send Offload (LSO) on a network adapter

    NICLargeSendOffloadCheck_Problem=Some network adapters are capable of LSO, but the capability is disabled.

    NICLargeSendOffloadCheck_Impact=Windows system performance may be degraded since link utilization for transmission, and CPU utilization is not optimized.

    NICLargeSendOffloadCheck_Resolution=Enable LSO with PowerShell cmdlet: Enable-NetAdapterLso, or in the network adapter Advanced Properties.

    NICLargeSendOffloadCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check NIC IPsec TO setting

    NICIPsecTaskOffloadCheck_Title=Enable IPsec Task Offload v2 (TOv2) on a network adapter

    NICIPsecTaskOffloadCheck_Problem=Some network adapters are capable of IPsec TOv2, but the capability is disabled.

    NICIPsecTaskOffloadCheck_Impact=Networking performance may be degraded, and the CPU may be over-utilized since they are not optimized.

    NICIPsecTaskOffloadCheck_Resolution=Enable IPsec TOv2 with PowerShell cmdlet: Enable-NetAdapterIPsecOffload, or in the network adapter Advanced Properties.

    NICIPsecTaskOffloadCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check NIC RSS setting

    NICReceiveSideScalingCheck_Title=Enable Receive Side Scaling (RSS) on a network adapter

    NICReceiveSideScalingCheck_Problem=Some network adapters are capable of RSS, but the capability is disabled.

    NICReceiveSideScalingCheck_Impact=Windows networking subsystem performance may be degraded since it is not configured to use multi-core and many-core processor architecture.

    NICReceiveSideScalingCheck_Resolution=Enable RSS with PowerShell cmdlet: Enable-NetAdapterRss, or in the network adapter Advanced Properties.

    NICReceiveSideScalingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

    

    # check NIC RSC setting

    NICReceiveSideCoalescingCheck_Title=Enable Receive Side Coalescing (RSC) on a network adapter

    NICReceiveSideCoalescingCheck_Problem=Some network adapters are capable of RSC, but the capability is disabled.

    NICReceiveSideCoalescingCheck_Impact=Windows networking subsystem performance may be degraded since it is not configured to use the network adapter to increase TCP/IP processing efficiency.

    NICReceiveSideCoalescingCheck_Resolution=Enable RSC with PowerShell cmdlet: Enable-NetAdapterRsc, or in the network adapter Advanced Properties.

    NICReceiveSideCoalescingCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.





    # check cluster-wide SMB server configuration consistency

    ClusterSmbConfigConsistencyCheck_Title=Smb server configuration should be consistent across cluster node

    ClusterSmbConfigConsistencyCheck_Problem=At least one smb server configuration isn't consistent across cluster nodes.

    ClusterSmbConfigConsistencyCheck_Impact=Having inconsistent smb server configuration across cluster nodes may cause performance and other issues.

    ClusterSmbConfigConsistencyCheck_Resolution=Make sure smb server configuration is consistent across all cluster nodes.

    ClusterSmbConfigConsistencyCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.



    # check SMB S4U2Self user claim retrieval settings consistency with Kerberos setting to locate a Windows 8 DC

    SMBS4U2SelfAndKerberosConsistencyCheck_Title=The SMB configuration for retrieving user claims on behalf of the user should be consistent with the Kerberos capabilities for the domain so that it can locate a claims-aware Windows Server 2012 domain controller when the domain supports claims

    SMBS4U2SelfAndKerberosConsistencyCheck_Problem=SMB is configured to retrieve claims on behalf of the user when claims are not provided by the user, but Kerberos authentication is not configured to request claims.

    SMBS4U2SelfAndKerberosConsistencyCheck_Impact=SMB will continue the logon process without user claims, and any file access requests that require user claims will be denied.

    SMBS4U2SelfAndKerberosConsistencyCheck_Resolution=To enable Kerberos authentication to request claims on behalf of the user on this server, configure the 'Kerberos client support for claims, compound authentication and Kerberos armoring' Group Policy setting in 'Computer Configuration\\Administrative Templates\\System\\Kerberos'.

    SMBS4U2SelfAndKerberosConsistencyCheck_Compliant=The File Server Best Practices Analyzer scan has determined that you are in compliance with this best practice.

'@

}



Import-LocalizedData -BindingVariable _system_translations -filename SMB.psd1



$windir = $env:Windir

. $windir\System32\BestPractices\v1.0\Models\Microsoft\Windows\FileServices\fscommon.ps1



#

# ------------------

# FUNCTIONS - START

# ------------------

#



#

# Function Description:

#

#  This function will update the XML document with SMB data

#

# Arguments:

#

#  $xmlDoc - XmlDocument manipulated

#  $ns - namespace used for the element 

#

# Return Value:

#

#  none

#

function GetSMBXml($xmlDoc, $ns)

{

    trap

    {        

        write-error $error[0]

        continue   

    }



    import-module SmbShare



    #Create SMB node

    $smbNode = $xmlDoc.CreateElement("SMB", $ns)

    [void]$xmlDoc.DocumentElement.AppendChild($smbNode)

    

    $computerName = [System.Net.Dns]::GetHostName()

    

    $path = "HKLM:\SYSTEM\CurrentControlSet\Services"

    $services = get-item -path $path



    #

    # Some of these services/drivers (like RKF) may be legitimately non existent on the server so we don't trigger a warning by default for them.

    #

    $isLanmanServerStartTypeAuto = $false

    # Set isSrvStartTypeAuto true by default to avoid warning in case srv is not installed.

    $isSrvStartTypeAuto  = $true

    $isSrv2StartTypeOnDemand = $false

    $isSrvnetStartTypeOnDemand = $false

    $isSmbWitnessStartTypeOnDemand = $true

    $isResumeKeyFilterStartTypeAuto = $true

    $isLanmanWorkstationStartTypeAuto = $false

    $isMrxsmb20StartTypeOnDemand = $false

    $isRdbssStartTypeSystem = $false

    $isMupStartTypeBoot = $false

    $isSmbDirectStartTypeOnDemand = $true



    #

    # Service/driver status.

    # Some of these services/drivers (like RKF) may be legitimately non existent on the server so we don't trigger a warning by default for them.

    #

    $isLanmanServerRunning = $false

    $isSrvRunning = $true

    $isSrv2Running = $false

    $isSrvnetRunning = $false

    $isSmbWitnessRunningOrStopped = $true

    $isResumeKeyFilterRunning = $true

    $isWorkStationServiceRunning = $false

    $isMrxsmb20Running = $false

    $isRdbssRunning = $false

    $isMupRunning = $false

    $isSmbDirectRunningOrStopped = $true





    Foreach ($subkey in $services.GetSubKeyNames())

    {

        $prop = get-itemproperty -path "$path\$subkey"



        if( $subkey -eq 'LanmanServer' )

        {

            if( $prop.Start -eq 2 ) {$isLanmanServerStartTypeAuto = $true} else {$isLanmanServerStartTypeAuto = $false}

            

            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isLanmanServerRunning = $true}

        }

        elseif( $subkey -eq 'Srv' )

        {

            if( $prop.Start -eq 2 ) {$isSrvStartTypeAuto  = $true} else {$isSrvStartTypeAuto  = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isSrvRunning  = $true}

        }

        elseif( $subkey -eq 'Srv2' )

        {

            if( $prop.Start -eq 3 ) {$isSrv2StartTypeOnDemand = $true} else {$isSrv2StartTypeOnDemand = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isSrv2Running  = $true}

        }

        elseif( $subkey -eq 'Srvnet' )

        {

            if( $prop.Start -eq 3 ) {$isSrvnetStartTypeOnDemand = $true} else {$isSrvnetStartTypeOnDemand = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isSrvnetRunning  = $true}

        }

        elseif( $subkey -eq 'SmbWitness' )

        {

            if( $prop.Start -eq 3 ) {$isSmbWitnessStartTypeOnDemand = $true} else {$isSmbWitnessStartTypeOnDemand = $false}



            $service = get-service $subkey

            if( ($service.Status.ToString() -eq "Running") -or ($service.Status.ToString() -eq "Stopped")) {$isSmbWitnessRunningOrStopped = $true} else {$isSmbWitnessRunningOrStopped = $false}

        }

        elseif( $subkey -eq 'ResumeKeyFilter' )

        {

            if( $prop.Start -eq 2 ) {$isResumeKeyFilterStartTypeAuto = $true} else {$isResumeKeyFilterStartTypeAuto = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isResumeKeyFilterRunning = $true} else {$isResumeKeyFilterRunning = $false}

        }

        elseif( $subkey -eq 'LanmanWorkstation' )

        {

            if( $prop.Start -eq 2 ) {$isLanmanWorkstationStartTypeAuto = $true} else {$isLanmanWorkstationStartTypeAuto = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isWorkStationServiceRunning = $true}

        }

        elseif( $subkey -eq 'Mrxsmb20' )

        {

            if( $prop.Start -eq 3 ) {$isMrxsmb20StartTypeOnDemand = $true} else {$isMrxsmb20StartTypeOnDemand = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isMrxsmb20Running = $true}

        }

        elseif( $subkey -eq 'Rdbss' )

        {

            if( $prop.Start -eq 1 ) {$isRdbssStartTypeSystem = $true} else {$isRdbssStartTypeSystem = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isRdbssRunning = $true}

        }

        elseif( $subkey -eq 'Mup' )

        {

            if( $prop.Start -eq 0 ) {$isMupStartTypeBoot = $true} else {$isMupStartTypeBoot = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" ) {$isMupRunning = $true}

        }

        elseif( $subkey -eq 'SmbDirect' )

        {

            if( $prop.Start -eq 3 ) {$isSmbDirectStartTypeOnDemand = $true} else {$isSmbDirectStartTypeOnDemand = $false}



            $service = get-service $subkey

            if( $service.Status.ToString() -eq "Running" -or $service.Status.ToString() -eq "Stopped" ) {$isSmbDirectRunningOrStopped = $true} else {$isSmbDirectRunningOrStopped = $false}

        }

    }



    Append-XmlElement $xmlDoc $smbNode $ns "IsLanmanServerStartTypeAuto" (Formalize-BoolValue $isLanmanServerStartTypeAuto)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSrvStartTypeAuto" (Formalize-BoolValue $isSrvStartTypeAuto)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSrv2StartTypeOnDemand" (Formalize-BoolValue $isSrv2StartTypeOnDemand)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSrvnetStartTypeOnDemand" (Formalize-BoolValue $isSrvnetStartTypeOnDemand)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSmbWitnessStartTypeOnDemand" (Formalize-BoolValue $isSmbWitnessStartTypeOnDemand)

    Append-XmlElement $xmlDoc $smbNode $ns "IsResumeKeyFilterStartTypeAuto" (Formalize-BoolValue $isResumeKeyFilterStartTypeAuto)

    Append-XmlElement $xmlDoc $smbNode $ns "IsLanmanWorkstationStartTypeAuto" (Formalize-BoolValue $isLanmanWorkstationStartTypeAuto)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMrxsmb20StartTypeOnDemand" (Formalize-BoolValue $isMrxsmb20StartTypeOnDemand)

    Append-XmlElement $xmlDoc $smbNode $ns "IsRdbssStartTypeSystem" (Formalize-BoolValue $isRdbssStartTypeSystem)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMupStartTypeBoot" (Formalize-BoolValue $isMupStartTypeBoot)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSmbDirectStartTypeOnDemand" (Formalize-BoolValue $isSmbDirectStartTypeOnDemand)



    Append-XmlElement $xmlDoc $smbNode $ns "IsLanmanServerRunning" (Formalize-BoolValue $isLanmanServerRunning)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSrvRunning" (Formalize-BoolValue $isSrvRunning)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSrv2Running" (Formalize-BoolValue $isSrv2Running)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSrvnetRunning" (Formalize-BoolValue $isSrvnetRunning)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSmbWitnessRunningOrStopped" (Formalize-BoolValue $isSmbWitnessRunningOrStopped)

    Append-XmlElement $xmlDoc $smbNode $ns "IsResumeKeyFilterRunning" (Formalize-BoolValue $isResumeKeyFilterRunning)

    Append-XmlElement $xmlDoc $smbNode $ns "IsWorkstationServiceRunning" (Formalize-BoolValue $isWorkStationServiceRunning)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMrxsmb20Running" (Formalize-BoolValue $isMrxsmb20Running)

    Append-XmlElement $xmlDoc $smbNode $ns "IsRdbssRunning" (Formalize-BoolValue $isRdbssRunning)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMupRunning" (Formalize-BoolValue $isMupRunning)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSmbDirectRunningOrStopped" (Formalize-BoolValue $isSmbDirectRunningOrStopped)





    #

    # Check server configurations

    #



    $smbServerConfiguration = Get-SmbServerConfiguration



    if( $smbServerConfiguration.AnnounceServer -eq $false ) { $isAnnounceServerSettingCorrect = $true } else { $isAnnounceServerSettingCorrect = $false }

    if( $smbServerConfiguration.AsynchronousCredits -eq 512 ) { $isAsynchronousCreditsSettingCorrect = $true } else { $isAsynchronousCreditsSettingCorrect = $false }

    if( $smbServerConfiguration.AutoShareServer -eq $true ) { $isAutoShareServerSettingCorrect = $true } else { $isAutoShareServerSettingCorrect = $false }

    if( $smbServerConfiguration.AutoShareWorkstation -eq $true ) { $isAutoShareWorkstationSettingCorrect = $true } else { $isAutoShareWorkstationSettingCorrect = $false }

    if( $smbServerConfiguration.CachedOpenLimit -eq 10 ) { $isCachedOpenLimitSettingCorrect = $true } else { $isCachedOpenLimitSettingCorrect = $false }

    if( $smbServerConfiguration.EnableDownlevelTimewarp -eq $false ) { $isEnableDownlevelTimewarpSettingCorrect = $true } else { $isEnableDownlevelTimewarpSettingCorrect = $false }

    if( $smbServerConfiguration.EnableLeasing -eq $true ) { $isEnableLeasingSettingCorrect = $true } else { $isEnableLeasingSettingCorrect = $false }

    if( $smbServerConfiguration.EnableMultiChannel -eq $true ) { $isEnableMultiChannelSettingCorrect = $true } else { $isEnableMultiChannelSettingCorrect = $false }

    if( $smbServerConfiguration.EnableStrictNameChecking -eq $true ) { $isEnableStrictNameCheckingSettingCorrect = $true } else { $isEnableStrictNameCheckingSettingCorrect = $false }

    if( $smbServerConfiguration.AutoDisconnectTimeout -eq 15 ) { $isAutoDisconnectTimeoutSettingCorrect = $true } else { $isAutoDisconnectTimeoutSettingCorrect = $false }

    if( $smbServerConfiguration.DurableHandleV2TimeoutInSeconds -eq 180 ) { $isDurableHandleV2TimeoutInSecondsSettingCorrect = $true } else { $isDurableHandleV2TimeoutInSecondsSettingCorrect = $false }

    if( $smbServerConfiguration.EnableAuthenticateUserSharing -eq $false ) { $isEnableAuthenticateUserSharingSettingCorrect = $true } else { $isEnableAuthenticateUserSharingSettingCorrect = $false }

    if( $smbServerConfiguration.EnableForcedLogoff -eq $true ) { $isEnableForcedLogoffSettingCorrect = $true } else { $isEnableForcedLogoffSettingCorrect = $false }

    if( $smbServerConfiguration.EnableOplocks -eq $true ) { $isEnableOplocksSettingCorrect = $true } else { $isEnableOplocksSettingCorrect = $false }

    if( $smbServerConfiguration.ServerHidden -eq $true ) { $isServerHiddenSettingCorrect = $true } else { $isServerHiddenSettingCorrect = $false }

    if( $smbServerConfiguration.IrpStackSize -eq 15 ) { $isIrpStackSizeSettingCorrect = $true } else { $isIrpStackSizeSettingCorrect = $false }

    if( $smbServerConfiguration.KeepAliveTime -eq 2 ) { $isKeepAliveTimeSettingCorrect = $true } else { $isKeepAliveTimeSettingCorrect = $false }

    if( $smbServerConfiguration.MaxChannelPerSession -eq 32 ) { $isMaxChannelPerSessionSettingCorrect = $true } else { $isMaxChannelPerSessionSettingCorrect = $false }

    if( $smbServerConfiguration.MaxMpxCount -eq 50 ) { $isMaxMpxCountSettingCorrect = $true } else { $isMaxMpxCountSettingCorrect = $false }

    if( $smbServerConfiguration.MaxSessionPerConnection -eq 16384 ) { $isMaxSessionPerConnectionSettingCorrect = $true } else { $isMaxSessionPerConnectionSettingCorrect = $false }

    if( $smbServerConfiguration.MaxThreadsPerQueue -eq 20 ) { $isMaxThreadsPerQueueSettingCorrect = $true } else { $isMaxThreadsPerQueueSettingCorrect = $false }

    if( $smbServerConfiguration.MaxWorkItems -eq 1 ) { $isMaxWorkItemsSettingCorrect = $true } else { $isMaxWorkItemsSettingCorrect = $false }

    if( $smbServerConfiguration.OplockBreakWait -eq 35 ) { $isOplockBreakWaitSettingCorrect = $true } else { $isOplockBreakWaitSettingCorrect = $false }

    if( $smbServerConfiguration.PendingClientTimeoutInSeconds -eq 120 ) { $isPendingClientTimeoutInSecondsSettingCorrect = $true } else { $isPendingClientTimeoutInSecondsSettingCorrect = $false }

    if( $smbServerConfiguration.EnableSMB1Protocol -eq $false ) { $isEnableSMB1ProtocolSettingCorrect = $true } else { $isEnableSMB1ProtocolSettingCorrect = $false }

    if( $smbServerConfiguration.EnableSMB2Protocol -eq $true ) { $isEnableSMB2ProtocolSettingCorrect = $true } else { $isEnableSMB2ProtocolSettingCorrect = $false }

    if( $smbServerConfiguration.Smb2CreditsMax -eq 8192 ) { $isSmb2CreditsMaxSettingCorrect = $true } else { $isSmb2CreditsMaxSettingCorrect = $false }

    if( $smbServerConfiguration.Smb2CreditsMin -eq 512 ) { $isSmb2CreditsMinSettingCorrect = $true } else { $isSmb2CreditsMinSettingCorrect = $false }

    if( $smbServerConfiguration.SmbServerNameHardeningLevel -eq 0 ) { $isSmbServerNameHardeningLevelSettingCorrect = $true } else { $isSmbServerNameHardeningLevelSettingCorrect = $false }

    if( $smbServerConfiguration.TreatHostAsStableStorage -eq $false ) { $isTreatHostAsStableStorageSettingCorrect = $true } else { $isTreatHostAsStableStorageSettingCorrect = $false }

    if( $smbServerConfiguration.ValidateAliasNotCircular -eq $true ) { $isValidateAliasNotCircularSettingCorrect = $true } else { $isValidateAliasNotCircularSettingCorrect = $false }

    if( $smbServerConfiguration.ValidateShareScope -eq $true ) { $isValidateShareScopeSettingCorrect = $true } else { $isValidateShareScopeSettingCorrect = $false }

    if( $smbServerConfiguration.ValidateShareScopeNotAliased -eq $true ) { $isValidateShareScopeNotAliasedSettingCorrect = $true } else { $isValidateShareScopeNotAliasedSettingCorrect = $false }

    if( $smbServerConfiguration.ValidateTargetName -eq $true ) { $isValidateTargetNameSettingCorrect = $true } else { $isValidateTargetNameSettingCorrect = $false }

    

    Append-XmlElement $xmlDoc $smbNode $ns "IsAnnounceServerSettingCorrect" (Formalize-BoolValue $isAnnounceServerSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsAsynchronousCreditsSettingCorrect" (Formalize-BoolValue $isAsynchronousCreditsSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsAutoShareServerSettingCorrect" (Formalize-BoolValue $isAutoShareServerSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsAutoShareWorkstationSettingCorrect" (Formalize-BoolValue $isAutoShareWorkstationSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsCachedOpenLimitSettingCorrect" (Formalize-BoolValue $isCachedOpenLimitSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableDownlevelTimewarpSettingCorrect" (Formalize-BoolValue $isEnableDownlevelTimewarpSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableLeasingSettingCorrect" (Formalize-BoolValue $isEnableLeasingSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableMultiChannelSettingCorrect" (Formalize-BoolValue $isEnableMultiChannelSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableStrictNameCheckingSettingCorrect" (Formalize-BoolValue $isEnableStrictNameCheckingSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsAutoDisconnectTimeoutSettingCorrect" (Formalize-BoolValue $isAutoDisconnectTimeoutSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsDurableHandleV2TimeoutInSecondsSettingCorrect" (Formalize-BoolValue $isDurableHandleV2TimeoutInSecondsSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableAuthenticateUserSharingSettingCorrect" (Formalize-BoolValue $isEnableAuthenticateUserSharingSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableForcedLogoffSettingCorrect" (Formalize-BoolValue $isEnableForcedLogoffSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableOplocksSettingCorrect" (Formalize-BoolValue $isEnableOplocksSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsServerHiddenSettingCorrect" (Formalize-BoolValue $isServerHiddenSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsIrpStackSizeSettingCorrect" (Formalize-BoolValue $isIrpStackSizeSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsKeepAliveTimeSettingCorrect" (Formalize-BoolValue $isKeepAliveTimeSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMaxChannelPerSessionSettingCorrect" (Formalize-BoolValue $isMaxChannelPerSessionSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMaxMpxCountSettingCorrect" (Formalize-BoolValue $isMaxMpxCountSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMaxSessionPerConnectionSettingCorrect" (Formalize-BoolValue $isMaxSessionPerConnectionSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMaxThreadsPerQueueSettingCorrect" (Formalize-BoolValue $isMaxThreadsPerQueueSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMaxWorkItemsSettingCorrect" (Formalize-BoolValue $isMaxWorkItemsSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsOplockBreakWaitSettingCorrect" (Formalize-BoolValue $isOplockBreakWaitSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsPendingClientTimeoutInSecondsSettingCorrect" (Formalize-BoolValue $isPendingClientTimeoutInSecondsSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableSMB1ProtocolSettingCorrect" (Formalize-BoolValue $isEnableSMB1ProtocolSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableSMB2ProtocolSettingCorrect" (Formalize-BoolValue $isEnableSMB2ProtocolSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSmb2CreditsMaxSettingCorrect" (Formalize-BoolValue $isSmb2CreditsMaxSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSmb2CreditsMinSettingCorrect" (Formalize-BoolValue $isSmb2CreditsMinSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSmbServerNameHardeningLevelSettingCorrect" (Formalize-BoolValue $isSmbServerNameHardeningLevelSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsTreatHostAsStableStorageSettingCorrect" (Formalize-BoolValue $isTreatHostAsStableStorageSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsValidateAliasNotCircularSettingCorrect" (Formalize-BoolValue $isValidateAliasNotCircularSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsValidateShareScopeSettingCorrect" (Formalize-BoolValue $isValidateShareScopeSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsValidateShareScopeNotAliasedSettingCorrect" (Formalize-BoolValue $isValidateShareScopeNotAliasedSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsValidateTargetNameSettingCorrect" (Formalize-BoolValue $isValidateTargetNameSettingCorrect)



    #

    # Check client configurations

    #



    $smbClientConfiguration = Get-SmbClientConfiguration



    if( $smbClientConfiguration.ConnectionCountPerRssNetworkInterface -eq 4 ) { $isConnectionCountPerRssNetworkInterfaceSettingCorrect = $true } else { $isConnectionCountPerRssNetworkInterfaceSettingCorrect = $false }

    if( $smbClientConfiguration.DirectoryCacheEntriesMax -eq 16 ) { $isDirectoryCacheEntriesMaxSettingCorrect = $true } else { $isDirectoryCacheEntriesMaxSettingCorrect = $false }

    if( $smbClientConfiguration.DirectoryCacheEntrySizeMax -eq 65536 ) { $isDirectoryCacheEntrySizeMaxSettingCorrect = $true } else { $isDirectoryCacheEntrySizeMaxSettingCorrect = $false }

    if( $smbClientConfiguration.DirectoryCacheLifetime -eq 10 ) { $isDirectoryCacheLifetimeSettingCorrect = $true } else { $isDirectoryCacheLifetimeSettingCorrect = $false }

    if( $smbClientConfiguration.EnableBandwidthThrottling -eq $TRUE ) { $isEnableBandwidthThrottlingSettingCorrect = $true } else { $isEnableBandwidthThrottlingSettingCorrect = $false }

    if( $smbClientConfiguration.EnableByteRangeLockingOnReadOnlyFiles -eq $TRUE ) { $isEnableByteRangeLockingOnReadOnlyFilesSettingCorrect = $true } else { $isEnableByteRangeLockingOnReadOnlyFilesSettingCorrect = $false }

    if( $smbClientConfiguration.EnableLargeMtu -eq $TRUE ) { $isEnableLargeMtuSettingCorrect = $true } else { $isEnableLargeMtuSettingCorrect = $false }

    if( $smbClientConfiguration.EnableMultiChannel -eq $TRUE ) { $isClientEnableMultiChannelSettingCorrect = $true } else { $isClientEnableMultiChannelSettingCorrect = $false }

    if( $smbClientConfiguration.DormantFileLimit -eq 1023 ) { $isDormantFileLimitSettingCorrect = $true } else { $isDormantFileLimitSettingCorrect = $false }

    if( $smbClientConfiguration.ExtendedSessionTimeout -eq 1000 ) { $isExtendedSessionTimeoutSettingCorrect = $true } else { $isExtendedSessionTimeoutSettingCorrect = $false }

    if( $smbClientConfiguration.FileInfoCacheEntriesMax -eq 64 ) { $isFileInfoCacheEntriesMaxSettingCorrect = $true } else { $isFileInfoCacheEntriesMaxSettingCorrect = $false }

    if( $smbClientConfiguration.FileInfoCacheLifetime -eq 10 ) { $isFileInfoCacheLifetimeSettingCorrect = $true } else { $isFileInfoCacheLifetimeSettingCorrect = $false }

    if( $smbClientConfiguration.FileNotFoundCacheEntriesMax -eq 128 ) { $isFileNotFoundCacheEntriesMaxSettingCorrect = $true } else { $isFileNotFoundCacheEntriesMaxSettingCorrect = $false }

    if( $smbClientConfiguration.FileNotFoundCacheLifetime -eq 5 ) { $isFileNotFoundCacheLifetimeSettingCorrect = $true } else { $isFileNotFoundCacheLifetimeSettingCorrect = $false }

    if( $smbClientConfiguration.KeepConn -eq 600 ) { $isKeepConnSettingCorrect = $true } else { $isKeepConnSettingCorrect = $false }

    if( $smbClientConfiguration.MaxCmds -eq 50 ) { $isMaxCmdsSettingCorrect = $true } else { $isMaxCmdsSettingCorrect = $false }

    if( $smbClientConfiguration.MaximumConnectionCountPerServer -eq 32 ) { $isMaximumConnectionCountPerServerSettingCorrect = $true } else { $isMaximumConnectionCountPerServerSettingCorrect = $false }

    if( $smbClientConfiguration.OplocksDisabled -eq $FALSE ) { $isOplocksDisabledSettingCorrect = $true } else { $isOplocksDisabledSettingCorrect = $false }

    if( $smbClientConfiguration.SessionTimeout -eq 60 ) { $isSessionTimeoutSettingCorrect = $true } else { $isSessionTimeoutSettingCorrect = $false }

    if( $smbClientConfiguration.UseOpportunisticLocking -eq $TRUE ) { $isUseOpportunisticLockingSettingCorrect = $true } else { $isUseOpportunisticLockingSettingCorrect = $false }

    if( $smbClientConfiguration.WindowSizeThreshold -eq 1 ) { $isWindowSizeThresholdSettingCorrect = $true } else { $isWindowSizeThresholdSettingCorrect = $false }



    Append-XmlElement $xmlDoc $smbNode $ns "IsConnectionCountPerRssNetworkInterfaceSettingCorrect" (Formalize-BoolValue $isConnectionCountPerRssNetworkInterfaceSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsDirectoryCacheEntriesMaxSettingCorrect" (Formalize-BoolValue $isDirectoryCacheEntriesMaxSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsDirectoryCacheEntrySizeMaxSettingCorrect" (Formalize-BoolValue $isDirectoryCacheEntrySizeMaxSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsDirectoryCacheLifetimeSettingCorrect" (Formalize-BoolValue $isDirectoryCacheLifetimeSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableBandwidthThrottlingSettingCorrect" (Formalize-BoolValue $isEnableBandwidthThrottlingSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableByteRangeLockingOnReadOnlyFilesSettingCorrect" (Formalize-BoolValue $isEnableByteRangeLockingOnReadOnlyFilesSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsEnableLargeMtuSettingCorrect" (Formalize-BoolValue $isEnableLargeMtuSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsClientEnableMultiChannelSettingCorrect" (Formalize-BoolValue $isClientEnableMultiChannelSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsDormantFileLimitSettingCorrect" (Formalize-BoolValue $isDormantFileLimitSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsExtendedSessionTimeoutSettingCorrect" (Formalize-BoolValue $isExtendedSessionTimeoutSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsFileInfoCacheEntriesMaxSettingCorrect" (Formalize-BoolValue $isFileInfoCacheEntriesMaxSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsFileInfoCacheLifetimeSettingCorrect" (Formalize-BoolValue $isFileInfoCacheLifetimeSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsFileNotFoundCacheEntriesMaxSettingCorrect" (Formalize-BoolValue $isFileNotFoundCacheEntriesMaxSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsFileNotFoundCacheLifetimeSettingCorrect" (Formalize-BoolValue $isFileNotFoundCacheLifetimeSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsKeepConnSettingCorrect" (Formalize-BoolValue $isKeepConnSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMaxCmdsSettingCorrect" (Formalize-BoolValue $isMaxCmdsSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMaximumConnectionCountPerServerSettingCorrect" (Formalize-BoolValue $isMaximumConnectionCountPerServerSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsOplocksDisabledSettingCorrect" (Formalize-BoolValue $isOplocksDisabledSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsSessionTimeoutSettingCorrect" (Formalize-BoolValue $isSessionTimeoutSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsUseOpportunisticLockingSettingCorrect" (Formalize-BoolValue $isUseOpportunisticLockingSettingCorrect)

    Append-XmlElement $xmlDoc $smbNode $ns "IsWindowSizeThresholdSettingCorrect" (Formalize-BoolValue $isWindowSizeThresholdSettingCorrect)



    # 

    # Check share related configuration

    #

    $count = 0

    get-smbshare -Scoped $true -Special $false -ContinuouslyAvailable $false | % { $count = $count + 1 }

    if( $count -eq 0 ) { $isShareCheck1Correct = $true } else { $isShareCheck1Correct = $false }



    $count = 0

    get-smbshare | where { $_.ShareState.ToString() -ne "Online" } | % { $count = $count + 1 }

    if( $count -eq 0 ) { $isShareCheck2Correct = $true } else { $isShareCheck2Correct = $false }



    $count = 0

    get-smbshare -AvailabilityType ScaleOut -FolderEnumerationMode AccessBased | % { $count = $count + 1 }

    if( $count -eq 0 ) { $isShareCheck3Correct = $true } else { $isShareCheck3Correct = $false }



    $count = 0

    get-smbshare | where { ($_.AvailabilityType.ToString() -eq "ScaleOut") -and ($_.Special -eq $false) -and ($_.CachingMode.ToString() -ne "None") } | % { $count = $count + 1 }

    if( $count -eq 0 ) { $isShareCheck4Correct = $true } else { $isShareCheck4Correct = $false }



    $count = 0

    get-smbshare | where { $_.ConcurrentUserLimit -ne 0 } | % { $count = $count + 1 }

    if( $count -eq 0 ) { $isShareCheck5Correct = $true } else { $isShareCheck5Correct = $false }



    $count = 0

    get-smbshare | where { $_.CATimeout -lt 25 -and $_.CATimeout -ne 0 } | % { $count = $count + 1 }

    if( $count -eq 0 ) { $isShareCheck6Correct = $true } else { $isShareCheck6Correct = $false }





    Append-XmlElement $xmlDoc $smbNode $ns "IsShareCheck1Correct" (Formalize-BoolValue $isShareCheck1Correct)

    Append-XmlElement $xmlDoc $smbNode $ns "IsShareCheck2Correct" (Formalize-BoolValue $isShareCheck2Correct)

    Append-XmlElement $xmlDoc $smbNode $ns "IsShareCheck3Correct" (Formalize-BoolValue $isShareCheck3Correct)

    Append-XmlElement $xmlDoc $smbNode $ns "IsShareCheck4Correct" (Formalize-BoolValue $isShareCheck4Correct)

    Append-XmlElement $xmlDoc $smbNode $ns "IsShareCheck5Correct" (Formalize-BoolValue $isShareCheck5Correct)

    Append-XmlElement $xmlDoc $smbNode $ns "IsShareCheck6Correct" (Formalize-BoolValue $isShareCheck6Correct)





    #

    # Check RdmaAndSigning setting. If there are RDMA NICs in the system and encryption or signing is enabled, then we should display a warning

    #

    $encryptedCount = 0

    get-smbshare -EncryptData $true | % { $encryptedCount = $encryptedCount + 1 }



    import-module netadapter

    $rdmaAdapterCount = 0

    get-NetAdapterRdma | % { $rdmaAdapterCount = $rdmaAdapterCount + 1 }



    if( (($encryptedCount -gt 0 -and $smbServerConfiguration.EncryptData) -or $smbServerConfiguration.EnableSecuritySignature) -and $rdmaAdapterCount -gt 0 )

    {

        $isRdmaAndSigningSettingCorrect = $false

    }

    else 

    {

        $isRdmaAndSigningSettingCorrect = $true

    }



    Append-XmlElement $xmlDoc $smbNode $ns "IsRdmaAndSigningSettingCorrect" (Formalize-BoolValue $isRdmaAndSigningSettingCorrect)



    #

    #Check HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Paramters registry key settings

    #

    $isDOSDetectionSettingOn = $true



    $path = "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters"

    $values = get-itemproperty -path $path

    if ($Values -ne $null)

    {

        if ($values.DisableDos -ne $null -and $Values.DisableDos -ne 0)

        {

            $isDOSDetectionSettingOn = $false

        }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsDOSDetectionSettingOn" (Formalize-BoolValue $isDOSDetectionSettingOn)



    

    #Check HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem registry key setting

    $is8Dot3NameCreationDisabled = $false

    $path = "HKLM:\SYSTEM\CurrentControlSet\Control\FileSystem"

    $values = get-itemproperty -path $path

    if ($Values -ne $null)

    {

        if ($Values.NtfsDisable8dot3NameCreation -eq 1)

        {

            $is8Dot3NameCreationDisabled = $true

        }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "Is8Dot3NameCreationDisabled" (Formalize-BoolValue $is8Dot3NameCreationDisabled)

    

    #Check firewall settings for port 139 and 445

    $isPortEnabled = $true

    $fwmgr = (new-object -com hnetcfg.fwmgr).localpolicy.currentprofile

    $services = $fwmgr.Services

    if ($fwmgr.FirewallEnabled -eq $true -and $services -ne $null)

    {

        $service = $fwmgr.Services | where {$_.Name -eq "File and Printer Sharing"}

        foreach($port in $service.GloballyOpenPorts)

        {

            if($port.Port -eq 139 -and $port.Enabled -eq $false)

            {

                $isPortEnabled = $false

            }

            if($port.Port -eq 445 -and $port.Enabled -eq $false)

            {

                $isPortEnabled = $false

            }

        }

    }



    #Overide the ports checking in case there is no user shares

    $shares =  Get-SmbShare | ? { -NOT $_.Special }

    if( -NOT $shares )

    {

      $isPortEnabled = $true

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsPortEnabled" (Formalize-BoolValue $isPortEnabled)

    

    #Check HKLM:\System\CurrentControlSet\Services\Tcpip\Parameters registry key settings

    $isNumTCPTablePartitionsDisabled = $true

    $isTCPWindowSizeDisabled = $true

    $isMaxHashTableSizeDisabled = $true

    $path = "HKLM:\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters"

    $values = get-itemproperty -path $path

    if ($Values -ne $null)

    {

        if ($values.NumTCPTablePartitions -ne $null)

        {

            $isNumTCPTablePartitionsDisabled = $false

        }

        if ($values.TCPWindowSize -ne $null)

        {

            $isTCPWindowSizeDisabled = $false

        }

        if ($values.MaxHashTableSize -ne $null)

        {

            $isMaxHashTableSizeDisabled = $false

        }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsNumTCPTablePartitionsDisabled" (Formalize-BoolValue $isNumTCPTablePartitionsDisabled)

    Append-XmlElement $xmlDoc $smbNode $ns "IsTCPWindowSizeDisabled" (Formalize-BoolValue $isTCPWindowSizeDisabled)

    Append-XmlElement $xmlDoc $smbNode $ns "IsMaxHashTableSizeDisabled" (Formalize-BoolValue $isMaxHashTableSizeDisabled)

    

    #

    # Check NIC Teaming Settings

    #       

    Import-Module netlbfo

    $nicTeams = Get-NetLbfoTeam

    

    $IsNicTeamMemberOfDiffLinkSpeed = $false

    $IsNicTeamMemberOfDiffSettings = $false

    foreach ($team in $nicTeams)

    {

      $teamMembers = @(Get-NetLbfoTeamMember -Team $team.name) 

      $linkSpeed = $null

      $dcbStatus = $null

      

      foreach ($nic in $teamMembers)

      {

        if ((Get-NetAdapter -name $nic.name).Status -eq "Up")

        {

          if ($linkSpeed -eq $null)

          {

            $linkSpeed = $nic.TransmitLinkSpeed

          }

          elseif ($linkSpeed -ne $nic.TransmitLinkSpeed)

          {

            $IsNicTeamMemberOfDiffLinkSpeed = $true

          }

        }

        

        if ($dcbStatus -eq $null)

        {

          $dcbStatus = (Get-NetAdapterQos -name $nic.name).Enabled

          if ($dcbStatus -eq $null)

          {

            $dcbStatus = $false

          }

        }

        else

        {

          $memberDcbStatus = (Get-NetAdapterQos -name $nic.name).Enabled

          if ($memberDcbStatus -eq $null)

          {

            $memberDcbStatus = $false

          }

          

          if ($dcbStatus -ne $memberDcbStatus)

          {

            $IsNicTeamMemberOfDiffSettings = $true

          }

        }

      }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsNicTeamMemberOfDiffLinkSpeed" (Formalize-BoolValue $IsNicTeamMemberOfDiffLinkSpeed)

    Append-XmlElement $xmlDoc $smbNode $ns "IsNicTeamMemberOfDiffSettings" (Formalize-BoolValue $IsNicTeamMemberOfDiffSettings)



    #

    # Check NIC Offload Technologies - note that we're only interested in phyical NICs

    #

    $PhysicalNics = Get-NetAdapter -Physical

    

    $IsChecksumOffloadEnabledOnNic = $true

    $ChecksumOffloadNics = $PhysicalNics | Get-NetAdapterChecksumOffload

    foreach ($nic in $ChecksumOffloadNics)

    {

      if (($nic.TcpIPv4Enabled -eq "Disabled") -or

          ($nic.TcpIPv6Enabled -eq "Disabled") -or

          ($nic.UdpIPv4Enabled -eq "Disabled") -or

          ($nic.UdpIPv6Enabled -eq "Disabled"))

      {

        $IsChecksumOffloadEnabledOnNic = $false

        break

      }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsChecksumOffloadEnabledOnNic" (Formalize-BoolValue $IsChecksumOffloadEnabledOnNic)

    

    $IsLargeSendOffloadEnabledOnNic = $true

    $LsoNics = $PhysicalNics | Get-NetAdapterLso

    foreach ($nic in $LsoNics)

    {

      if (($nic.version -eq 1 -and -not $nic.V1IPv4Enabled) -or

          ($nic.version -eq 2 -and (-not $nic.IPv4Enabled -or -not $nic.IPv6Enabled)))

      {

        $IsLargeSendOffloadEnabledOnNic = $false

        break

      }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsLargeSendOffloadEnabledOnNic" (Formalize-BoolValue $IsLargeSendOffloadEnabledOnNic)

    

    $IsIPsecTaskOffloadEnabledOnNic = $true

    $IPsecNics = $PhysicalNics | Get-NetAdapterIPsecOffload

    foreach ($nic in $IPsecNics)

    {

      if (-not $nic.Enabled)

      {

        $IsIPsecTaskOffloadEnabledOnNic = $false

        break

      }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsIPsecTaskOffloadEnabledOnNic" (Formalize-BoolValue $IsIPsecTaskOffloadEnabledOnNic)

    

    $IsReceiveSideScalingEnabledOnNic = $true

    $RssNics = $PhysicalNics | Get-NetAdapterRss

    foreach ($nic in $RssNics)

    {

      # RSS is operationally disabled if the NIC is bound to a switch

      if (IsNicBoundToHyperVSwitch($nic))

      {

        continue

      }

      

      if (-not $nic.Enabled)

      {

        $IsReceiveSideScalingEnabledOnNic = $false

        break

      }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsReceiveSideScalingEnabledOnNic" (Formalize-BoolValue $IsReceiveSideScalingEnabledOnNic)

    

    $IsReceiveSideCoalescingEnabledOnNic = $true

    $RscNics = $PhysicalNics | Get-NetAdapterRsc

    foreach ($nic in $RscNics)

    {

      # RSC is operationally disabled if the NIC is bound to a switch

      if (IsNicBoundToHyperVSwitch($nic))

      {

        continue

      }

      

      if (($nic.RscHardwareCapabilities.IPv4Supported -and -not $nic.IPv4Enabled) -or

          ($nic.RscHardwareCapabilities.IPv6Supported -and -not $nic.IPv6Enabled))

      {

        $IsReceiveSideCoalescingEnabledOnNic = $false

        break

      }

    }

    Append-XmlElement $xmlDoc $smbNode $ns "IsReceiveSideCoalescingEnabledOnNic" (Formalize-BoolValue $IsReceiveSideCoalescingEnabledOnNic)





    #

    # Check whether smb server configuration is consistent across cluster

    #



    $clusterConfigConsistent = $true



    $clusvc = get-service -name clussvc



    if( $clusvc -and 

        ($clusvc.Status -eq [System.ServiceProcess.ServiceControllerStatus]"Running") -and 

        (get-clusterresource | where-object {$_.ResourceType.ToString().Contains("File Server")}) )

    {

        $nodes = get-clusternode



        $localConfig = Get-SmbServerConfiguration

        $configProperties = $localConfig | Get-Member | Where-Object{$_.MemberType -eq "Property"}



        foreach($node in $nodes)    

        {

            if( $node.State.ToString() -ne "Up" ) { continue }



            $nodeConfig = Get-SmbServerConfiguration -CimSession $node.Name



            foreach( $configProp in $configProperties )

            {

                if( $configProp.Name -eq "PSComputerName" ) { continue }

                

                if( $localConfig.($configProp.Name) -ne $nodeConfig.($configProp.Name) )

                {

                    $clusterConfigConsistent = $false

                    Write-Warning "Smb server configuration $configProp mismatches between this node and $node.Name"

                    break

                }

            }



            if( -not $clusterConfigConsistent) { break }

        }

    }





    Append-XmlElement $xmlDoc $smbNode $ns "IsSmbServerConfigConsistentAcrossCluster" (Formalize-BoolValue $clusterConfigConsistent)



    #

    # check SMB S4U2Self user claim retrieval settings consistency with Kerberos setting to locate a Windows 8 DC

    # The check is that if EnableS4U2SelfForClaims is set to 1 then EnableCbacAndArmor should also be set to 1

    #

    $IsSMBS4U2SelfConfigConsistentWithKerberosConfig = $true

    

	$S4U2Selfpath = "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters"

	$S4U2SelfValues = get-itemproperty -path $S4U2Selfpath



    if ($S4U2SelfValues -ne $null)

    {

        if ($S4U2SelfValues.EnableS4U2SelfForClaims -ne $null -and $S4U2SelfValues.EnableS4U2SelfForClaims -eq 1)

        {

			# Kerberos is looking in two locations, one local and one for policy and if one of these is set to

			# True (1) then Kerberos will try to look for a W8 DC



			$Kerberospath1 = "HKLM:\Software\Microsoft\Windows\CurrentVersion\Policies\System\Kerberos\Parameters"

			$KerberosValues1 = get-itemproperty -path $Kerberospath1

			$Kerberospath2 = "HKLM:\SYSTEM\CurrentControlSet\Control\Lsa\Kerberos\Parameters"

			$KerberosValues2 = get-itemproperty -path $Kerberospath2

		    if (($KerberosValues1.EnableCbacAndArmor -eq $null -or $KerberosValues1.EnableCbacAndArmor -ne 1) -and

				($KerberosValues2.EnableCbacAndArmor -eq $null -or $KerberosValues2.EnableCbacAndArmor -ne 1))

			{

                $IsSMBS4U2SelfConfigConsistentWithKerberosConfig = $false

		    }

        }

    }



    Append-XmlElement $xmlDoc $smbNode $ns "IsSMBS4U2SelfConfigConsistentWithKerberosConfig" (Formalize-BoolValue $IsSMBS4U2SelfConfigConsistentWithKerberosConfig)



}



function IsNicBoundToHyperVSwitch ($nic)

#

# FUNCTION DESCRIPTION:

#   Check if a NIC is directly or indirectly bound to a Hyper-V switch. A NIC 

#   is indirectly bound to a switch if it is a member of a LBFO team, whose

#   tNic is bound to a switch.

# 

# PARAMETERS:

#   $nic - an MSFT_NetAdapter object

#

# RETURN VALUES:

#   $true - if $nic is bound, directly or indirectly, to a switch

#   $false - Otherwise

#

{

  if ((Get-NetAdapterBinding $nic.name | ?{$_.ComponentID -eq "vms_pp"}).Enabled)

  {

    return $true

  }

  

  $teamMember = Get-NetLbfoTeamMember $nic.name

  if ($teamMember -ne $null)

  {

    $allTNics = Get-NetLbfoTeamNic -team $teamMember.team

    foreach ($tNic in $allTNics)

    {

      if ((Get-NetAdapterBinding $tNic.name | ?{$_.ComponentID -eq "vms_pp"}).Enabled)

      {

        return $true

      }

    }

  }

  

  return $false

}





#

# ------------------

# FUNCTIONS - END

# ------------------

#



#

# ------------------------

# SCRIPT MAIN BODY - START

# ------------------------

#



#

# Initialize to perform querying Role information

#

Setup



# 

# Set the Target Namespace to be used by XML

#

$tns="http://schemas.microsoft.com/bestpractices/models/FileServices/SMB/2011/04"



#

# Create a new XmlDocument

#

$doc = Create-DocumentElement $tns "SMBComposite"



GetSMBXml $doc $tns



#

# Role Information obtained.

#

TearDown



$doc



# can be used for testing purpose

$doc.Save([Environment]::SystemDirectory + "\BestPractices\v1.0\Models\Microsoft\Windows\FileServices\tempSMB.xml")

Youez - 2016 - github.com/yon3zu
LinuXploit