Skip to content

Commit

Permalink
Merging changes synced from https://github.com/MicrosoftDocs/windowss…
Browse files Browse the repository at this point in the history
…erverdocs-pr (branch live)
  • Loading branch information
Learn Build Service GitHub App authored and Learn Build Service GitHub App committed Aug 14, 2024
2 parents cdd2c41 + fd32ffa commit b1e10be
Show file tree
Hide file tree
Showing 2 changed files with 25 additions and 9 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -4,7 +4,7 @@ description: Learn how to configure SMB over QUIC client access control using Po
ms.topic: how-to
author: gswashington
ms.author: nedpyle
ms.date: 04/29/2024
ms.date: 08/14/2024
#customer intent: As an administrator, I want to configure SMB over QUIC client access control in Windows Server so that I can restrict which clients can access SMB over QUIC servers.
---

Expand All @@ -25,19 +25,29 @@ Client access control checks clients connecting to a server are using a known cl

You can also configure SMB over QUIC to block access by revoking certificates or explicitly denying certain devices access.

> [!NOTE]
> We recommend using SMB over QUIC with Active Directory domains, however it isn't required. You can also use SMB over QUIC on a workgroup-joined server with local user credentials and NTLM.
## Prerequisites

Before you can configure client access control, you need an *SMB server* with the following prerequisites.

- An SMB server running Windows Server 2022 Datacenter: Azure Edition with the [March 12, 2024—KB5035857 Update](https://support.microsoft.com/topic/march-12-2024-kb5035857-os-build-20348-2340-a7953024-bae2-4b1a-8fc1-74a17c68203c) or [Windows Server Insiders build 25977](https://techcommunity.microsoft.com/t5/windows-server-insiders/announcing-windows-server-preview-build-25977/m-p/3958483) or later. To unlock the preview feature you must also install [Windows Server 2022 KB5035857 240302_030531 Feature Preview](https://download.microsoft.com/download/d/c/b/dcb54178-7997-4a5a-84bf-6269cfa3bb68/Windows%20Server%202022%20KB5035857%20240302_030531%20Feature%20Preview.msi).
- An SMB server running Windows Server 2022 Datacenter: Azure Edition with the [March 12, 2024—KB5035857 Update](https://support.microsoft.com/topic/march-12-2024-kb5035857-os-build-20348-2340-a7953024-bae2-4b1a-8fc1-74a17c68203c) or [Windows Server Insiders build 25977](https://techcommunity.microsoft.com/t5/windows-server-insiders/announcing-windows-server-preview-build-25977/m-p/3958483) or later. To unlock the preview feature you must also install [Windows Server 2022 KB5035857 240302_030531 Feature Preview](https://download.microsoft.com/download/d/c/b/dcb54178-7997-4a5a-84bf-6269cfa3bb68/Windows%20Server%202022%20KB5035857%20240302_030531%20Feature%20Preview.msi).
- SMB over QUIC enabled and configured on the server. To learn how to configure SMB over QUIC, see [SMB over QUIC](smb-over-quic.md).
- If you're using client certificates issued by a different certificate authority (CA), you need to ensure that the CA is trusted by the server.
- Administrative privileges for the SMB server you're configuring.

> [!IMPORTANT]
> Once KB5035857 is installed, you must enable this feature in Group Policy:
>
> 1. Click **Start**, type **gpedit**, and select **Edit group policy**.
> 1. Navigate to **Computer Configuration\Administrative Templates\KB5035857 240302_030531 Feature Preview\Windows Server 2022**.
> 1. Open the **KB5035857 240302_030531 Feature Preview** policy and select **Enabled**.
You also need an *SMB client* with the following prerequisites.

- An SMB client running on one of the following operating systems:
- Windows Server 2022 Datacenter: Azure Edition with the [March 12, 2024—KB5035857 Update](https://support.microsoft.com/topic/march-12-2024-kb5035857-os-build-20348-2340-a7953024-bae2-4b1a-8fc1-74a17c68203c). To unlock the preview feature you must also install [Windows Server 2022 KB5035857 240302_030531 Feature Preview](https://download.microsoft.com/download/d/c/b/dcb54178-7997-4a5a-84bf-6269cfa3bb68/Windows%20Server%202022%20KB5035857%20240302_030531%20Feature%20Preview.msi).
- Windows Server 2022 Datacenter: Azure Edition with the [March 12, 2024—KB5035857 Update](https://support.microsoft.com/topic/march-12-2024-kb5035857-os-build-20348-2340-a7953024-bae2-4b1a-8fc1-74a17c68203c). To unlock the preview feature you must also install [Windows Server 2022 KB5035857 240302_030531 Feature Preview](https://download.microsoft.com/download/d/c/b/dcb54178-7997-4a5a-84bf-6269cfa3bb68/Windows%20Server%202022%20KB5035857%20240302_030531%20Feature%20Preview.msi).
- Windows 11 with the [March 12, 2024—KB5035853 Update](https://support.microsoft.com/topic/march-12-2024-kb5035853-os-builds-22621-3296-and-22631-3296-a69ac07f-e893-4d16-bbe1-554b7d9dd39b). To unlock the preview feature you must also install [Windows 11 (original release) KB5035854 240302_030535 Feature Preview](https://download.microsoft.com/download/9/7/e/97ecf574-855e-441c-9141-bfb61ec2074e/Windows%2011%20(original%20release)%20KB5035854%20240302_030535%20Feature%20Preview.msi).
- [Windows Server Insiders build 25977](https://techcommunity.microsoft.com/t5/windows-server-insiders/announcing-windows-server-preview-build-25977/m-p/3958483) or later.
- [Windows 11 Insider Preview Build 25977 (Canary Channel)](https://blogs.windows.com/windows-insider/2023/10/18/announcing-windows-11-insider-preview-build-25977-canary-channel/) or later.
Expand All @@ -47,8 +57,12 @@ You also need an *SMB client* with the following prerequisites.
- Installed in the client's certificate store.
- Administrative privileges for the SMB server you're configuring.

> [!NOTE]
> We recommend using SMB over QUIC with Active Directory domains, however it isn't required. You can also use SMB over QUIC on a workgroup-joined server with local user credentials and NTLM.
> [!IMPORTANT]
> Once KB5035854 is installed, you must enable this feature in Group Policy:
>
> 1. Click **Start**, type **gpedit**, and select **Edit group policy**.
> 1. Navigate to **Computer Configuration\Administrative Templates\KB5035854 240302_030535 Feature Preview\Windows 11 (original release)**.
> 1. Open the **KB5035854 240302_030535 Feature Preview** policy and select **Enabled**.
## Configure the SMB client

Expand Down
10 changes: 6 additions & 4 deletions WindowsServerDocs/storage/storage-migration-service/faq.yml
Original file line number Diff line number Diff line change
Expand Up @@ -4,8 +4,7 @@ metadata:
description: Frequently asked questions about Storage Migration Service, such as what files are excluded from transfers when migrating from one server to another.
author: nedpyle
ms.author: nedpyle
manager: siroy
ms.date: 06/25/2024
ms.date: 08/14/2024
ms.topic: faq
ms.service: windows-server
title: Storage Migration Service frequently asked questions (FAQ)
Expand Down Expand Up @@ -196,13 +195,15 @@ sections:
- question: What are my options to give feedback, file bugs, or get support?
answer: |
For technical assistance with the Storage Migration Service, you can post at [Microsoft Q & A](https://learn.microsoft.com/en-us/answers/index.html) or contact [Microsoft Business Support](https://support.microsoft.com/contactus).
To give feedback on the Storage Migration Service:
- Use the Feedback Hub tool included in Windows Server 2025 and Windows 11, select **Suggest a Feature**, and specifying the category of **Windows Server** and subcategory of **Storage Migration**
- Use the Feedback Hub tool included in Windows Server 2025 and Windows 11, select **Suggest a Feature**, select the **Windows Server** category, and subcategory of **Storage Migration**
To file bugs:
- Use the Feedback Hub tool included in Windows Server 2025 and Windows 11, select **Report a Problem**, and specifying the category of **Windows Server** and subcategory of **Storage Migration**
- Use the Feedback Hub tool included in Windows Server 2025 and Windows 11, select **Report a Problem**, select the **Windows Server** category, and subcategory of **Storage Migration**
- Open a support case via [Microsoft Support](https://support.microsoft.com)
To get support:
Expand All @@ -213,4 +214,5 @@ sections:
additionalContent: |
## Additional references
- [Storage Migration Service overview](overview.md)

0 comments on commit b1e10be

Please sign in to comment.