API Reference
ISmbSecurityChecker
Provides methods for validating SMB configuration on domain controllers.
Usage
This type appears in these public API surfaces even when no hand-authored example is attached directly to the page.
Accepted by parameters
Methods
public abstract Int32 GetMinVersion(String dcName) #Int32Gets the minimum SMB protocol version allowed by the domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
Minimum supported protocol version.
public abstract SmbPolicyDifferences GetPolicyDifferences(String dcName) #SmbPolicyDifferencesCompares policy and runtime SMB settings for the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
Differences between policy and actual configuration.
public abstract Int32 GetPolicyMinVersion(String dcName) #Int32Gets the minimum SMB protocol version enforced by policy on the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
Policy minimum protocol version.
public abstract SmbPolicyStatus GetPolicyStatus(String dcName) #SmbPolicyStatusGets the SMB policy status for the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
Current policy status.
public abstract IEnumerable<SmbPolicyStatus> GetPolicyStatusReport() #IEnumerable<SmbPolicyStatus>Retrieves SMB policy status for all discovered domain controllers.
Returns
Enumeration of SMB policy statuses.
public abstract IReadOnlyList<SmbProtocolVersion> GetPolicySupportedVersions(String dcName) #IReadOnlyList<SmbProtocolVersion>Retrieves SMB protocol versions allowed by policy on the domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
List of protocol versions permitted by policy.
public abstract SmbSecurityStatus GetStatus(String dcName) #SmbSecurityStatusGets the SMB security status for the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
Current SMB security status.
public abstract IEnumerable<SmbSecurityStatus> GetStatusReport() #IEnumerable<SmbSecurityStatus>Retrieves SMB security status for all discovered domain controllers.
Returns
Enumeration of SMB security statuses.
public abstract IReadOnlyList<SmbProtocolVersion> GetSupportedVersions(String dcName) #IReadOnlyList<SmbProtocolVersion>Retrieves SMB protocol versions supported by the domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
List of supported protocol versions.
public abstract Boolean IsEncryptionRequired(String dcName) #BooleanDetermines whether SMB encryption is required on the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
true if required; otherwise false.
public abstract Boolean IsPolicyEncryptionRequired(String dcName) #BooleanDetermines whether policy requires SMB encryption on the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
true if required; otherwise false.
public abstract Boolean IsPolicySigningRequired(String dcName) #BooleanDetermines whether policy requires SMB signing on the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
true if required; otherwise false.
public abstract Boolean IsPolicySmb1Enabled(String dcName) #BooleanDetermines whether policy enables SMBv1 on the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
true if enabled; otherwise false.
public abstract Boolean IsSigningRequired(String dcName) #BooleanDetermines whether SMB signing is required on the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
true if required; otherwise false.
public abstract Boolean IsSmb1Enabled(String dcName) #BooleanChecks whether SMBv1 is enabled on the specified domain controller.
Parameters
- dcName System.String
- Domain controller name.
Returns
true if SMBv1 is enabled; otherwise false.
public abstract Void ValidateAll() #VoidValidates SMB settings across all discovered domain controllers.
public abstract Void ValidateDc(String dcName) #VoidValidates SMB settings on the specified domain controller and logs warnings for insecure configuration.
Parameters
- dcName System.String
- Domain controller name.