03/26/2019 515 views


Trying to capture USMT from Windows 10 version 10.0.17763 but am getting error NT_STATUS_END_OF_FILE

KBE is same version and USMT is 10.0

Windows firewall, UAC is disabled and Network File Discovery has been enabled

Thanks in advance

Answer Summary:
0 Comments   [ + ] Show comments


Answer Chosen by the Author


I have resolved the issue by disabling SMBv2 on Windows 10 and enabling SMBv1 which allows for capture. Used commands below

SMB v1 Protocol

Detect: Get-WindowsOptionalFeature –Online –FeatureName SMB1Protocol

Disable: Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

Enable: Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

SMB v2/v3 Protocol

Detect: Get-SmbServerConfiguration | Select EnableSMB2Protocol

Disable: Set-SmbServerConfiguration –EnableSMB2Protocol $false

Enable: Set-SmbServerConfiguration –EnableSMB2Protocol $true

Answered 03/26/2019 by: kace_admin
Orange Senior Belt