Is this you? As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.
Claim your profile
Articles by Ned Pyle
Beyond GPUs: The hidden hurdle to enterprise AI success
Every conversation about AI seems to begin with GPUs. Organizations compete to deploy the latest accelerators and increase compute capacity in pursuit of faster model training and better outcomes. GPUs are expensive, increasingly scarce, and fundamental to modern AI. But for most enterprises, they’re only one part of the equation.
SMB security hardening in Windows Server 2025 & Windows 11
Heya folks, Ned here again. Last November, Microsoft launched the Secure Future Initiative (SFI) to prepare for the increasing scale and high stakes of cyberattacks. SFI brings together every part of Microsoft to advance cybersecurity protection across our company and products.
Accessing a third-party NAS with SMB in Windows 11 24H2 may fail
Heya folks, Ned here again. With the publication of Windows 11 24H2 Release Preview, customers are trying out the new OS prior to general availability. If you were in the Windows Insider Canary or Dev release program for the past few years, nothing I'm about to share is new. But if you weren't and you're now having issues mapping a drive to your third-party network attached storage (NAS) devices using SMB, this article is for you.
Completing a DFSR SYSVOL migration of a domain using Entra ID passwordless SSO
Heya folks, Ned here again. A customer recently reached out to me in the comments section of the well-worn Streamlined Migration of FRS to DFSR SYSVOL article, asking about a problem he was seeing with a single DC that wouldn't complete the process. Today I'll explain how to fix the issue introduced by a very modern authentication add-on.
Storage in Windows Server 2025, from the Server Summit
Heya folks, Ned here again. The three-day Windows Server Summit 2024 just completed and there are great on-demand sessions about Windows Server 2025 and Windows vNext. Some of the most interesting ones for this blog's audience are below, but the whole summit is worth a watch if you're an IT Pro, decision maker, consultant, architect, or C-level.
Windows Insider build 26090 brings small changes for SMB
Heya folks, Ned here again. We continue to make SMB changes to Windows vNext and Windows Server 2025 based on customer feedback and last mile work. With the release of Windows 11 Insider Preview Build 26090 (Canary and Dev Channels), we have a few more small ones. Some of these were based on Insider feedback from customers - your opinions really do matter to us! SMB over QUIC client disable: Administrators can now disable the SMB over QUIC client with Group Policy and PowerShell.
Windows Insider build 26080 brings small changes for SMB
Heya folks, Ned here again. We continue to make SMB changes to Windows vNext and Windows Server 2025 based on customer feedback and last mile work. With the release of Windows 11 Insider Preview Build 26090 (Canary and Dev Channels), we have a few more small ones. Some of these were based on Insider feedback from customers - your opinions really do matter to us! SMB over QUIC client disable: Administrators can now disable the SMB over QUIC client with Group Policy and PowerShell.
Demo bytes: SSH for Azure Arc | Storage Replica
by Heather Poulsen Community Manager Demo time: Get an up-close look at managing Windows Server via SSH Arc and the next generation of Storage Replica! First up, explore the future of Windows Server remote procedure calls (RPCs) and see how to enable SSH remoting on Windows Server 2025, and how to connect without a public IP address via Azure Arc. Then, Storage Replica was first released in Windows Server 2016 and has come a long way.
Windows Server Insider Preview 26040 is out - and so is the new name
Heya folks, Ned here again. We've resumed the Windows Server Insider program after our winter break and there's a new build, new features, and - finally - the official branding: • None Windows Server Flighting: Windows Server Insider now support flighting and downloadable in-place upgrades, exactly like Windows 11; no need to grab ISOs and run manual setup.
What's new in Windows Server vNext Ignite Session Now Available
Heya folks, Ned here again. The Microsoft Ignite 2023 session "What's new in Windows Server vNext" is now up if you weren't able to attend in person. It covers many of the new features coming to Windows Server including Active Directory, File Server, Hyper-V, storage, and more. Many announcements were made - Hotpatch and SMB over QUIC for Datacenter and Standard editions, for example - along with some big surprises and some great demos.
SMB over QUIC now available in Windows Server Insider Datacenter and Standard editions
Heya folks, Ned here again. Starting with Windows Server Insider Preview Build 25997, the SMB over QUIC server feature is now available in Datacenter and Standard editions. This changes the previous behavior, where it was only available in Windows Server Azure Edition. SMB over QUIC SMB over QUICintroduced an alternative to TCP and RDMA, supplying secure connectivity to edge file servers over untrusted networks like the Internet.
SMB firewall rule changes in Windows Insider
Heya folks, Ned here again. Starting with Windows 11 Insider preview Build 25992 (Canary), creating SMB shares changes a longtime Windows Defender Firewall default behavior. Before Previously, creating a share automatically configured the firewall to enable the rules in the “File and Printer Sharing” group for the given firewall profiles.
SMB alternative ports now supported in Windows Insiders
Heya folks, Ned here again. Starting with Windows 11 Insider preview Build 25992 (Canary), the SMB client now supports connecting to an SMB server over TCP, QUIC, or RDMA using alternative network ports. Today I'll explain how to configure this and talk about the near future of this in Windows and Windows Server Insiders a bit.
DR 2.0: Migrating from DFSR to Storage Replica
Heya folks, Ned here again. Today I’m sharing advice on migrating from Distributed File System Replication (DFSR) to Storage Replica. This includes deciding when SR is a good replacement, inventorying your DFSR and DFS Namespaces, backing up your existing configuration, validating your existing replication and converging it, migrating to SR, then updating your disaster recovery runbook. Let’s get to re-replicating! What is Storage Replica? We introduced Storage Replica in Windows Server 2016.
SMB client encryption mandate now supported in Windows Insider
Heya folks, Ned here again. Beginning in Windows 11 Insider Preview Build 25982 (Canary Channel), SMB now supports requiring encryption of all outbound SMB client connections. With this new option, administrators can mandate that all destination servers support SMB 3.x and encryption, and if missing those capabilities, the client won’t connect. This enforces the highest level of network security as well as bringing management parity to SMB signing, which allows both client and server requirements.
New CISA Stop Ransomware Guide
Heya folks, Ned here again. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) just released their updated #StopRansomware Guide with a number of new contributions from Microsoft, including a substantial section on hardening SMB and remote file services. See page 8 and 9 for the new SMB and remote file services recommendations. If you've been following my blogs and articles for the past few years, they should be familiar.
SMB over QUIC client access control now supported in Windows Insider
Heya folks, Ned here again. Beginning in Windows 11 Insider Preview Build 25977 (Canary Channel), SMB over QUIC now supports access control for clients. Today I’ll explain how this works, what the advantages are, and how to set it up. SMB over QUIC SMB over QUIC introduced an alternative to TCP and RDMA, supplying secure connectivity to edge file servers over untrusted networks like the Internet.
SMB dialect management now supported in Windows Insider
Heya folks, Ned here again. Beginning in Windows 11 Insider Preview Build 25951 (Canary), the SMB server now supports controlling which SMB 2 and 3 dialects it will negotiate. This changes legacy behavior, where Windows SMB server always negotiated the highest matched server dialect from SMB 2.0.2 to 3.1.1 clients. Beginning in Windows 10, support was added for controlling SMB client dialects, but not server dialects.
SMB NTLM blocking now supported in Windows Insider
Heya folks, Ned here again. Beginning in Windows 11 Insider Preview Build 25951 (Canary), the SMB client now supports blocking NTLM for remote outbound connections. This changes legacy behavior, where Windows SPNEGO would negotiate Kerberos, NTLM, and other mechanisms with the destination server to decide on a supported security package. NTLM in this case refers to all versions of the LAN Manager security package: LM, NTLM, and NTLMv2.
Hotpatching is now available for Windows Server VMs on Azure with Desktop Experience!
We’re excited to announce the General Availability of Hotpatching on Windows Server 2022 Datacenter: Azure Edition VMs with Desktop Experience. This fulfills one of our biggest requests from customers: Hotpatching beyond Server Core. Hotpatch updates simplify securing your Windows Server devices without needing a reboot. Early adopters have reported being able to update their VMs within a couple of days as compared to previously taking weeks.
SMB Signing and Guest Authentication
Heya folks, Ned here again. We recently madeSMB signing the default in Windows Insider Enterprise client builds. In doing so, we were quickly reminded of a consequence from an old unsafe SMB behavior that some folks still use: guest authentication. Today I'll explain all this and give you the steps to both fix and workaround the issue. If you're in a hurry, skip down to the fixes and workarounds section below.
SMB signing by default is coming
Heya folks, Ned here again. Beginning in Windows 11 Insider Preview Build 25381 (Canary, zn_release) Enterprise editions, SMB signing is now required by default for all connections. This changes legacy behavior, where Windows 10 and 11 required SMB signing by default only when connecting to shares named SYSVOL and NETLOGON and where Active Directory domain controllers required SMB signing when any client connected to them.
The beginning of the end of Remote Mailslots
Heya folks, Ned here again. With the release of Windows 11 Insider Preview Build 25314, we have started disabling the Remote Mailslot protocol by default. This is a precursor to deprecation and eventual removal from Windows. You aren't using this extremely legacy protocol unless you're also using the deprecated and disabled-by-default SMB1 protocol, so 99.97% of you have nothing to worry about.
Upgrading and updating Windows Server AMA coming March 9
cancel Turn on suggestions
Upgrading and updating Windows Server AMA
Join us for our March 9 “Ask Microsoft Anything” chat about Windows Server updates and upgrades. We’ll cover your questions on how to stay more secure by upgrading older servers (2008 and 2012 versions), the importance of running regular updates, and security features for Windows Server 2022 and Windows Server on Azure.
Windows Server DFSR and File Replication Survey
Heya folks, Ned here again. I just published a survey for IT Pros on DFSR and file replication. It will take only a couple minutes, is completely anonymous (unless you want to share more) and will help us make decisions about future technology in Windows Server. Your feedback is invaluable for prioritizing our work, we really welcome your experience. >> Take survey << DFSR is a replication system that synchronizes files between servers.
Group Policy Preferences Drive Map Survey and Feedback
Heya folks, Ned here again. I just published a survey for IT Pros on Group Policy Preferences Drive Map. It's just a few minutes of your time, totally anonymous (unless you want to talk more) and could help make your life easier someday. Your feedback is invaluable for prioritizing our work, we really welcome your experience. >> Take survey << Group Policy Preferences (aka "GPP") and its Drive Map option are features included in Active Directory.
Offline Files survey and feedback
Heya folks, Ned here again. I just published a survey for IT Pros on Offline Files (aka "Client-side Caching", aka "CSC"). It's just 5 minutes of your time, totally anonymous, and should help us make your life easier someday. Your feedback is invaluable for prioritizing our work, we really welcome your experience. https://forms.office.com/r/w5hUqA1Pk7 Until next time, Ned Pyle
SMB insecure guest auth now off by default in Windows Insider Pro editions
Heya folks, Ned here again. Starting in Windows 11 Insider Preview Build 25276, the Pro editions of Windows now disable SMB insecure guest authentication fallbacks by default. Guest logons don't require passwords & don't support standard security features like signing and encryption.
Support ends for Windows Server 2008 R2, Windows 7, 8.1
cancel Turn on suggestions
Re: SMB and Null Sessions: Why Your Pen Test is Probably Wrong
Doing a net use \\dc1\IPC$ "" /user: against a Server 2012 R2 domain controller returns The command completed successfully.
Re: Bogus event 2505
Heya folks, Ned here again. A few customers have reported this known issue on Windows 11 machines & you may see this event at boot up and perhaps occasionally afterwards.
New file and storage options for Windows Server announced at Ignite
Heya folks, Ned here again. I recently wrote up all the changes that are now available to Windows Server Azure Edition - or are coming soon - and a number of them help out in file server and storage scenarios. Storage Replica compression, new SMB over QUIC options, hotpatching of Desktop Experience file servers, running edge file servers on Azure Stack HCI instead of just Azure, etc.
Re: Slower SMB read performance for large files in 22H2
Hi @Ned Pyle thanks for letting us know. May I share some thoughts and questions? 1. Could it be the "lazy-writeback", introed and enabled by default since 1809 builds could be a cause? Even when not utilizing SMB over network but usual local copy jobs e. g. from / two nvme one might notice a massive jigsaw effect when copying solid bigger files, especially with File Explorer, not so much with Robocopy as of its nature of multithreading.
SMB authentication rate limiter now on by default in Windows Insider
Heya folks, Ned here again. Back in the spring of 2022 we released a new SMB preview feature: the SMB authentication rate limiter. It is available in Windows 11 Insider and Windows Server Insider builds. IT staff often enable access to the SMB server service even on machines that aren't dedicated file servers for legitimate reasons like opening remote files or copying logs. A side effect of this is that SMB becomes a way to attempt authentication.
SMB compression behavior & settings changes
Heya folks, Ned here again. As you know from a previous post, we released an end-to-end SMB compression capability with Windows 11 and Windows Server 2022. You can learn all about it at SMB Compression | Microsoft Docs. There was an idiosyncrasy in the initial design that we changed with the release of Windows Server 2022 update KB5016693 (OS Build 20348.946) and Windows 11 update KB5016691.
Re: SMB1 now disabled by default for Windows 11 Home Insiders builds
Heya folks, Ned here again. I have a pretty big announcement: we've started the final phase of disabling SMB1 in Windows. As you probably know, we began shipping Windows 10 and Windows Server with SMB1 not installed by default in RS3, the "Fall Creators Update" of 2017. Initially, we stopped installing the SMB1 server service in any editions of Windows and stopped installing the SMB1 client service in most editions of Windows.
SMB Authentication Rate Limiter in Insider builds
Mar 16 2022 12:29 PM Heya folks, Ned here again. I've got a new SMB preview feature to share: the SMB authentication rate limiter. It's available in Windows Server Insider build 25075. In a few weeks it will also appear in Windows Server Azure Edition Insider & Windows 11 Insider Dev Channel builds. You don't have to do anything - it's just there and working out-of-the-box - but I expect you want to know more.
Feedback on Hotpatch, SMB over QUIC, and Extended Network in Azure Edition
Mar 15 2022 10:27 AM Heya folks, Ned here again. We released Windows Server 2022 Azure Edition in November as part of Azure Automanage, which included the Hotpatch preview, SMB over QUIC, & Azure Extended Network features. In , we also GA'ed the Hotpatch feature. We will soon be starting the Azure Edition Insider program, where you can get a preview of new features coming to in the first major release this autumn, including big changes to Storage Replica, SMB, and some surprises.
Windows Server Hotpatching is here!
Feb 16 2022 11:01 AM Heya folks, Ned Pyle & Nick Washburn here with a big announcement: Hotpatching is now generally available as part of . This capability allows you to patch and install updates to their Windows Server Azure Edition core virtual machines on Azure without requiring a reboot! Together with Azure Automanage and included Azure-orchestrated patching, keeping your VMs up to date is easier and faster than ever.
SMB over QUIC is GA and we have lots of news!
Nov 04 2021 01:25 PM Heya folks, Ned here again. As you might have heard now in all the MS Ignite hullabaloo, Windows Server 2022 Datacenter: Azure Edition is now generally available and that means that SMB over QUIC is now generally available too! I have a ton of news to share, let's crack on. SMB over QUIC offers an "SMB VPN" for telecommuters, mobile device users, and branch offices, providing secure, reliable connectivity to edge file servers over untrusted networks like the Internet.
Bogus event 2505
Oct 25 2021 01:25 PM Heya folks, Ned here again. A few customers have reported this known issue on Windows 11 machines & you may see this event at boot up and perhaps occasionally afterwards.
Windows 11 Insider 22449 update for SMB compression
Sep 14 2021 04:04 PM Heya folks, Ned here again. We released a change to SMB compression for Windows 11 Insider Preview build 22449 & later. TL/DR We stopped being so algorithmically cute: when you request compression, we now just try to do it because you said so. :) Full explanation We first introducedSMB compressionin Windows Server 2022 & Windows 11. SMB compression allows an administrator, user, or application to request compression of files as they transfer over the network.
Windows Server 2022 is full of new file services!
Sep 01 2021 09:17 AM Heya folks, Ned here again. As you’ve heard by now, Windows Server 2022 is available and supported for production deployments. This new OS brings many new features around security, storage, networking, web, containers, applications, virtualization, edge, and Azure hybrid. Today I’ll highlight what we’ve introduced for the single most used scenario in organizations: File Services.
Configure SMB Signing with Confidence
Heya folks, Ned here again. Many years ago, we made configuring SMB signing in Windows pretty complicated. Then, years later, we made it even more complicated in an attempt to be less complicated. Today I'm here to explain the SMB signing rules once and for all. Probably. Sign me up! What is signing and why do you care SMB signing means that every SMB 3.1.1 message contains a signature generated using session key and AES.
What the heck is the File Server "role" in Windows Server???
Jul 27 2021 11:57 AM Heya folks, Ned here again. Today I clear up an old idiosyncrasy of Windows Server: if the SMB Server service is always installed, why is there a role called "File Server" and what does enabling it do? Let's... role ;) Default SMB firewall behavior The SMB Server service - "Server", aka "Lanmanserver" - always exists in Windows and isn't something you install; it's just there, as soon as you install the OS.
Storage Migration Service now supports NetApp
May 20 2021 11:56 AM Heya folks, Ned here again. Eagle-eyed readers may have noticed in the April 22, 2021-KB5001384 monthly update for Windows Server 2019 - and now in the May 2021 Patch Tuesday - we added support for migrating from NetApp FAS arrays onto Windows Servers and clusters. I already updated all our SMS documentation on https://aka.ms/storagemigrationservice so you're good-to-go on steps.
Register for Microsoft Plugfest 33
Mar 11 2021 02:36 PM (guest post from Amrit Shandilya from the Microsoft File System Minifilter Team) Hello! We are excited to announce that Plugfest 33 has been scheduled! In light of global health concerns due to novel coronavirus (COVID-19), Plugfest is going virtual for the first time ever! Health and well-being of our employees, partners, customers and other guests remain our ultimate priority. In this Virtual Plugfest, VMs hosted on Azure will take the place of physical HW.
Storage Migration Service October 2020 Update
Heya folks,Nedhere again. We've released our next set of features and fixes for the Windows Server 2019 Storage Migration Service, as part of cumulative update KB4580390 (Windows Server 2019) & KB4580386 (SAC 1903, 1909) This update comes optionally in the third week of October and then as part of the normal "Patch Tuesday" on November 10. Read on for details.
How to Defend Users from Interception Attacks via SMB Client Defense
Hey folks, Ned here again with another guest post. Today we discuss hardening the SMB protocol in Windows against interception attacks, previously referred to as “Man-in-the-Middle” attacks. As you know, interception attacks involve manipulating communications between client and server. An attacker might be eavesdropping, stealing credentials, or diverting a client to an evil endpoint masquerading as a friendly server.
Show More
loading
Actions
Is this you?
As a journalist, you can create a free Muck Rack account to customize your profile, list your contact preferences, and upload a portfolio of your best work.Get in touch with Ned
Contact Ned, search articles and posts on X, monitor coverage, and track replies from one place.
Learn more about Muck Rack