SMB NTLM blocking
Microsoft's edit ·
Microsoft's commit message in MicrosoftDocs/windowsserverdocs · commit 6e18fe6 · +9 −3 lines · also on GitHub
⋯ 60 unchanged lines
6161
6262
#### [PowerShell](#tab/powershell)
6363
64
−There isn't currently a PowerShell equivalent to the Block NTLM Server Exception List that lets you block only specific existing remote machines. However, you can block NTLM when mapping new SMB drives by running the following commands.
64
+There isn't currently a PowerShell equivalent to the Block NTLM Server Exception List Group Policy object. In order to set up an exception list, you must go into the Group Policy Editor and configure the setting manually. However, once you've completed the manual setup, you can make individual exceptions for certain IPs by running this command:
6565
66
−1. Run this command to specify NTLM blocking when mapping a drive with NET USE:
66
+ ```powershell
67
+ Set-SmbServerConfiguration -ExceptionList "<IP Address>"
68
+ ```
6769
70
+You can also block NTLM when mapping new SMB drives by running the following commands.
71
+
72
+Run this command to specify NTLM blocking when mapping a drive with NET USE:
73
+
6874
```powershell
6975
NET USE \\server\share /BLOCKNTLM
7076
```
7177
72
−1. Run this command to specify NTLM blocking when mapping an SMB drive:
78
+Run this command to specify NTLM blocking when mapping an SMB drive:
7379
7480
```powershell
7581
New-SmbMapping -RemotePath \\server\share -BlockNTLM $true
⋯ 11 unchanged lines
Microsoft's Markdown source from MicrosoftDocs/windowsserverdocs, © Microsoft Corporation, under CC BY 4.0. Changed lines with up to 3 unchanged lines around each; ChangeIntel kept this copy 10 Oct 08:53 UTC. The commit date is when the source changed, which can be hours or days before Learn published it.