Scan to folder problem

[BillyCarpenter]

We did an install today on a Kyocera 4551ci. I set up scan to folder on 2 computers and it worked fine. About an hour later I get a call and now they can't scan to folder on either computer. I go back and find that the security and share permissions had mysteriously changed. I changed back and everything was fine.

I'm thinking their security software is changing the settings. They are using Kaspersky. Anyone ever had this problem and do you have any suggestions. Thanks?

[BillyCarpenter]

Re: Scan to folder problem

I think I have if figured out. I downloaded a free trial of Kaspersky Total Security on my personal computer and sure enough it changed my permissions on a shared folder that I created. Turns out that you can go under settings in Kaspersky and exclude individual folders from Kaspersky. This shit is for the birds.

[bsm2]

Re: Scan to folder problem

Kaspersky software is Russian
Not recommended by US GOVERNMENT

Some anti virus will block smb scanning and ftp.
Usally you can add the copier ipaddress.
Have not had one that blocked sharing.

Also sometimes a Windows update will do that or reset windows firewall setting back to defaud.

[BillyCarpenter]

Re: Scan to folder problem

Kaspersky software is Russian
Not recommended by US GOVERNMENT

I can believe it. I don't like it. I'm about to uninstall this bullshit.

[bsm2]

Re: Scan to folder problem

U.S. Government Formalizes Kaspersky Ban

[BillyCarpenter]

Re: Scan to folder problem

U.S. Government Formalizes Kaspersky Ban

Thanks for the article. I just emailed it to my customer and recommended that he stop using it at once. I also noticed that it slowed my computer down.

[bsm2]

Re: Scan to folder problem

Ive been use Vipre for my Windows Pc's

HSN used to sell a Lifetime but looks like best is 5 years for 8 Pc's 99.00 that's still a good deal. Black Friday May be cheaper

US company

[Bix]

Re: Scan to folder problem

These are the paranoia of the United States.
Kaspersky is one of the best antivirus in Europe. Usually if it blocks scans it is because the folder is not secure (for example SMB 1.0). It doesn't usually block randomly.
This is not solving a problem, it is trying to bypass the problem by asking the customer to remove a program that is inconvenient for you.

[bsm2]

Re: Scan to folder problem

These are the paranoia of the United States.
Kaspersky is one of the best antivirus in Europe. Usually if it blocks scans it is because the folder is not secure (for example SMB 1.0). It doesn't usually block randomly.
This is not solving a problem, it is trying to bypass the problem by asking the customer to remove a program that is inconvenient for you.

Security Risk Identified by multiple US Government Agencies. Banned for use in any Federal Agencies computer.
FYI it was banned under the Trump Administration.

[BillyCarpenter]

Re: Scan to folder problem

These are the paranoia of the United States.
Kaspersky is one of the best antivirus in Europe. Usually if it blocks scans it is because the folder is not secure (for example SMB 1.0). It doesn't usually block randomly.
This is not solving a problem, it is trying to bypass the problem by asking the customer to remove a program that is inconvenient for you.

Interesting.

Since I'm a rookie to all of this, I rely on the expertise of the more experienced members. I have a few comments and questions.


It's my understanding that SMB 1.0 is permanently disabled and cannot be turned back on. True or false?

I just went in powershell and disabled SMB 2.0 and scan to folder no longer worked. I expected that. I just wanted to see for myself as I had never disabled SMB 2.0 before.

Here's my last question. Is it the job of a copier company to learn every security program under the sun and make it work for the copier that's being installed?

[rthonpm]

Re: Scan to folder problem

Interesting.

Since I'm a rookie to all of this, I rely on the expertise of the more experienced members. I have a few comments and questions.


It's my understanding that SMB 1.0 is permanently disabled and cannot be turned back on. True or false?

I just went in powershell and disabled SMB 2.0 and scan to folder no longer worked. I expected that. I just wanted to see for myself as I had never disabled SMB 2.0 before.

Here's my last question. Is it the job of a copier company to learn every security program under the sun and make it work for the copier that's being installed?

Not at all. Any decent security suite isn't going to automatically alter user settings. With Microsoft finally adding a more than sufficient AV into Windows 10 within five to six years there will be a big drop in consumer facing antivirus software, just like there was with firewalls after XP Service Pack 2 helped to kill those. Outside of enterprise environments where hundreds to thousands of endpoints need to be centrally monitored, antivirus software as we know it today is a dying breed.

SMB 1 can be turned back on, but in 2020 there should be no reason to keep a 30+ year old protocol turned on, especially with the security issues it opens up. SMB2 and SMB3 are still well supported, though we'll probably see SMB2 begin to be phased out in ten to fifteen years.

[BillyCarpenter]

Re: Scan to folder problem

These are the paranoia of the United States.
Kaspersky is one of the best antivirus in Europe. Usually if it blocks scans it is because the folder is not secure (for example SMB 1.0). It doesn't usually block randomly.
This is not solving a problem, it is trying to bypass the problem by asking the customer to remove a program that is inconvenient for you.

Thought I'd follow up on this. I believe Bix is correct. The reason Kaspersky is blocking SMB scan is because it saw the shared folder as unsecure. When we initially shared the folder we granted permission to "everyone" and it saw that as unsecure. The 2nd time around we granted permission only to the individual user and removed everyone.

Here are the instructions:

1. Create a folder, just as you would create a normal folder, in a location of your choice on the computer.
2. Right-click the folder, and then click [Sharing and Security].
3. On the [Sharing] tab, select [Share this folder].
4. Click [Permissions].
5. In the [Group or user names:] list, select "Everyone", and then click [Remove].
6. Click [Add].
7. In the [Select Users or Groups] window, click [Advanced].
8. Specify one or more object types, select a location, and then click [Find Now].
9. From the list of results, select the groups and users you want to grant access to, and then click [OK].
10. In the [Select Users or Groups] window, click [OK].
11. In the [Groups or user names:] list, select a group or user, and then, in the [Allow] column of the permissions list, select either the [Full Control] or [Change] check box.
    Configure the access permissions for each group and user.
12. Click [OK].
13. Select the [Security] tab, and then configure the access permissions.
    Add to the list the groups and users whom you want to grant access to, and then configure the access permissions for each. The procedure is the same as the procedure explained in steps 6 through 11.
14. Click [OK].

[tsbservice]

Re: Scan to folder problem

Thought I'd follow up on this. I believe Bix is correct. The reason Kaspersky blocking SMB scan is because it saw the shared folder as unsecure. When we initially shared the folder we granted permission to "everyone" and it saw that as unsecure. The 2nd time around we granted permission only to the individual user and removed everyone.

Here are the instructions:

1. Create a folder, just as you would create a normal folder, in a location of your choice on the computer.
2. Right-click the folder, and then click [Sharing and Security].
3. On the [Sharing] tab, select [Share this folder].
4. Click [Permissions].
5. In the [Group or user names:] list, select "Everyone", and then click [Remove].
6. Click [Add].
7. In the [Select Users or Groups] window, click [Advanced].
8. Specify one or more object types, select a location, and then click [Find Now].
9. From the list of results, select the groups and users you want to grant access to, and then click [OK].
10. In the [Select Users or Groups] window, click [OK].
11. In the [Groups or user names:] list, select a group or user, and then, in the [Allow] column of the permissions list, select either the [Full Control] or [Change] check box.
    Configure the access permissions for each group and user.
12. Click [OK].
13. Select the [Security] tab, and then configure the access permissions.
    Add to the list the groups and users whom you want to grant access to, and then configure the access permissions for each. The procedure is the same as the procedure explained in steps 6 through 11.
14. Click [OK].

You shouldn't use Everyone. It has to be local user who has read/write privileges to shared folder.
You can even use script to automatically do this. I have one from user here(big thanks to mincopier).

[rthonpm]

Re: Scan to folder problem

You shouldn't use Everyone. It has to be local user who has read/write privileges to shared folder.
You can even use script to automatically do this. I have one from user here(big thanks to mincopier).

At the share level, you can select Everyone and then pare down through NTFS permissions. It's always best to use Modify as opposed to just read/write permissions on the folder.

[peps54]

Re: Scan to folder problem

Thanks for sharing

Thought I'd follow up on this. I believe Bix is correct. The reason Kaspersky is blocking SMB scan is because it saw the shared folder as unsecure. When we initially shared the folder we granted permission to "everyone" and it saw that as unsecure. The 2nd time around we granted permission only to the individual user and removed everyone.

Here are the instructions:

1. Create a folder, just as you would create a normal folder, in a location of your choice on the computer.
2. Right-click the folder, and then click [Sharing and Security].
3. On the [Sharing] tab, select [Share this folder].
4. Click [Permissions].
5. In the [Group or user names:] list, select "Everyone", and then click [Remove].
6. Click [Add].
7. In the [Select Users or Groups] window, click [Advanced].
8. Specify one or more object types, select a location, and then click [Find Now].
9. From the list of results, select the groups and users you want to grant access to, and then click [OK].
10. In the [Select Users or Groups] window, click [OK].
11. In the [Groups or user names:] list, select a group or user, and then, in the [Allow] column of the permissions list, select either the [Full Control] or [Change] check box.
    Configure the access permissions for each group and user.
12. Click [OK].
13. Select the [Security] tab, and then configure the access permissions.
    Add to the list the groups and users whom you want to grant access to, and then configure the access permissions for each. The procedure is the same as the procedure explained in steps 6 through 11.
14. Click [OK].