SETUP AND FUNCTIONAL TESTING OF AN SMB SERVER BASED ON WINDOWS SERVER. SECURITY ISSUES

This article examines the process of configuring and functionally testing an SMB server running Windows Server within a corporate domain infrastructure. It focuses on organizing shared access to file resources and network devices, as well as a comprehensive analysis of information security issues related to the operation of the SMB protocol. The experimental portion of the study was implemented in a virtual environment using virtualization software, which allowed us to simulate a typical corporate network infrastructure, including a domain controller, a file server, and client workstations. Functional testing was conducted, confirming the correctness of access rights delimitation and the stability of the service. Particular attention is given to a practical demonstration of one of the critical attacks—SMB Relay (NTLM Relay). The article describes in detail the attack scenario and the conditions for its successful implementation, including the lack of an SMB digital signature and the possibility of modifying DNS records. It also demonstrates how an attacker can gain privileged access to the system and execute code with SYSTEM privileges. Based on their analysis, the authors formulate key recommendations for secure SMB configuration, including disabling the outdated SMBv1 protocol, mandating packet signing, and regularly updating software. These findings can be used in training information security and system administration professionals, as well as in practical applications to improve the security of corporate networks.