Book Image

Hyper-V Security

By : Eric Siron, Andrew Syrewicze
Book Image

Hyper-V Security

By: Eric Siron, Andrew Syrewicze

Overview of this book

Table of Contents (15 chapters)
Hyper-V Security
About the Authors
About the Reviewers

Securing SMB 3.0 shares for VM storage

A very closely related topic to NTFS permissions is the securing of SMB shares. While the permission model for shares is much simpler than that of NTFS, it follows the same basic pattern.

There are a growing number of commercial devices that can expose SMB 3.0 shares. They may have some of their own needs. If you own or are planning to own one of these devices, make sure that you work with the manufacturer to properly configure any necessary security settings to satisfy your organizational requirements.

If your SMB 3.0 share is running on a Windows Server 2012 R2 system, remember to disable CIFS/SMB 1.0. We showed you how to do that in Chapter 2, Securing the Host, but it's worth repeating:

Remove-WindowsFeature -Name FS-SMB1

Next, lock down the share itself. Unlike NTFS permissions, Hyper-V will not get involved with the configuration of a share.


Remember that NTFS and Share permissions are cumulative. Each of these is first determined separately,...