[Misc] Scan to Folder Problem after MS Update

[PillePalle]

Hi Guys

Since 3 Days we are having lot`s of Customers calling because of Scan to Folder Problems after Windows Update. Since i was not able to find any Information regarding this Problem i tested around a little bit.

The Problem is this Update KB3165191

After you install this security update, the following changes are applied: NETBIOS communication outside of the local subnet is hardened. Therefore, by default, some features that depend on NETBIOS (such as SMB over NETBIOS) will not work outside the local subnet. To change this new default behavior, create the following registry entry:

SUBKEY:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\NetBT\Parameters
Value Name: AllowNBToInternet
Type: Dword
Value: 1

If someone is facing this Problem and uses this Solution let me know if it worked for you like it worked for my 3 Test`s i made with this Solution. By the way the Problem is also faced by other Brand`s for example Canon.

Have a nice Day

[PillePalle]

Re: Scan to Folder Problem after MS Update

Hi All

I made a Fix for this. SImply download the Attachment and change the end of the file from "*.txt" to "*.reg" and execute it on the local machine. It will add the Reg Key to the right Place.

SMB-Fix.txt

[anothertech]

Re: Scan to Folder Problem after MS Update

Hi All

I made a Fix for this. SImply download the Attachment and change the end of the file from "*.txt" to "*.reg" and execute it on the local machine. It will add the Reg Key to the right Place.

[ATTACH]33368[/ATTACH]

I'm kinda leary about downloading something like that, could be virus?

[PillePalle]

Re: Scan to Folder Problem after MS Update

I'm kinda leary about downloading something like that, could be virus?

Well is no Virus but that will not help you much. You can download it and let run a Virusscanner over it. But anyone knowing about Crypters and FUD Viruses will know that you will never be certain even with a AV Scan. There is another simply way. make the registry entry yourself. Up to you. But again it`s no Virus. There are much easyer ways to hack someone if needed.


Have a nice Day

[slimslob]

Re: Scan to Folder Problem after MS Update

I'm kinda leary about downloading something like that, could be virus?

Since it is a text file and knowing the way .reg files for updating the registry work, I looked at the file and compared it to the manual edit to the registry. The only diference that I noted is in the manual edit instructions there is a typo. There should not be a space between the c and e in Services.

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Servic es\NetBT\Parameters

[Brianneoe]

Re: Scan to Folder Problem after MS Update

Hi All,
Please review and pass this along to others in your organizations who may need to be aware of this.



Microsoft Security Bulletin MS16-077 - Scanning to SMB fails.



If Scan to Folder is conducted on a computer or server that has the Windows Update that was published on June 14, 2016, applied, it might fail to send to the folder.

The following information is what we currently know about KB3161949:


Symptom
If Scan to Folder is conducted on a computer or server that has the Windows Update that was published on June 14, 2016, applied, it might fail to send to the folder.

Cause
If KB3161949 is included in an update that is applied from Windows Update, this issue might be occur.

After applying this KB, it restricts the network connection of TCP 139 (NetBIOS over TCP/IP) to only a local segment. Therefore, a connection for Scan to Folder by using TCP 139 from the MFP, which is in a different segment from the destination computer, might be denied.

Workaround
To avoid this issue, please conduct the following workaround:

- Change the priority port for the SMB client to TCP 445 (Direct Hosting/CIFS) by using telnet.

Change the priority port procedure of the SMB client:
1) Connect to the target device by using telnet from the command prompt and log in as the administrator.
2) Enter the following command:
>smb client port 445


RICOH Maintenance Shell.
User access verification.
login: ***** (enter the Administrator login name)
Password: (enter the password)
User access verification ... OK.
RICOH ********
Network Control Service Ver. 12.78
Copyright (C) 1994-2016 Ricoh Co.,Ltd. All rights reserved.
msh>smb client port 445
msh> smb
Workgroup Name : WORKGROUP
Computer Name :
Comment :
Notification : Off
Protocol : IPv4
Client Port : 445
Client Auth Level : 0
Client WSD Browse : Off
Client Write Mode : Async
msh> logout
Logout Maintenance Shell.
Do you save configuration data? (yes/no/return) > yes
Yes.
Now, Save data.
Or

- Specify WINS or DNS on the device to conduct name resolution.

Applicable operating systems
Operating systems that can have KB3161949 applied, which include Windows Vista and later versions of Windows.

Reference
Please refer to the following link, which includes public information about KB3161949, as described by Microsoft. For more details and/or inquiries, please contact Microsoft: https://support.microsoft.com/en-us/kb/3161949

[Imprestik]

Re: Scan to Folder Problem after MS Update

There is firmware out to resolve this issue for all Ricoh devices. Done this a heap of times already without touching the clients PC's

[anothertech]

Re: Scan to Folder Problem after MS Update

I ran into this today, upgraded firmware on an MPC6003 and on two MP5002's, still not scanning, had to telnet in and change the port to 445.

Actually, had to download the utility putty, because telnet is not loaded on my laptop.

[mbolduc]

Re: Scan to Folder Problem after MS Update

Making a registry change on a customers PC is pretty intrusive.

A telnet session on the Ricoh NIC to change smb port to 445 sounds way more recommended.

I have been changing Kyocera smb scan ports to 445 from 139 for a few years now without issues, which you can change much easier through web connection, than a telnet session.

Good Luck

[slimslob]

Re: Scan to Folder Problem after MS Update

One thing I encountered last week after this thread was started had to do with domain name. The customer was a school district. The district office has two machines, one color and one B/W. The B/W quit scanning to folders on the file server for the domain. Each school campus has its own subnet, different third octet. There is also a separate subnet for the district office and the main servers have their own subnet. At first I thought that the problem might be the MS update but the IT said that the color machine was working. I compared the settings on the 2 machines and first noticed the color machine was using computer name and the B/W was using IP address. I changed to computer and test connection could not find destination. I printed the interface settings to see the error lg and noticed the it said DNS request rejected. I then compared the interface settings between the 2 machines and notice the the domain name for the color machine ended in .net and the B/W .org. I changed the B/W machine and now both work.

I think that the MS Update caused the server to reject scans, not from out of subnet but instead from out of domain.

[PillePalle]

Re: Scan to Folder Problem after MS Update

One thing I encountered last week after this thread was started had to do with domain name.

Hey there

Faced that one as well the last few days and found almost the same as you. Tomorrow when i`m back at work i paste the infomations in.

[PillePalle]

Re: Scan to Folder Problem after MS Update

Making a registry change on a customers PC is pretty intrusive.

Well yes it is but let me tell you this. I work as ICTS Remote Supporter and i`m in in touch any days with average Customers that have different problems. Most of them don`t really give a damn about what you do as long they can Work again.

And Yes Telnet sound like reasonable and better solution but they want a solution and they want it now. A registry key was in those cases a clean fast and easy solution. And really They don`t care what you do.

You know what i do when i got a Customer complaining about Scan to Mail not working? I put in a SMTP Server from a Subaccount i have somewhere. I ask them first if that is ok with them and in 99.9% of the Cases the answer is that i should do whatever is needed to get this stuff up and running again. They don`t care if it`s a SMTP Server of someone else as long as it`s working. I got 3rd party IT Peoples that i have to deal with that let me join a Customers Network to fix something and then ask after 5 Minutes if it`s ok for me if they go and have a smoke while i`m fixing the Problem. Then i say Yes and they leave to have a smoke while i could do whatever i would like to do on the server and the PC of the IT Guy.

Small Companies, at least here where i am, much of the Time they don`t even have a IT. Not even a Person that has some experience when it comes to networking and stuff like that. Even if they have IT Peoples so much Times they seem to not have a Clue what they talking about. Scan to Folder or Scan to Mail Problems for example. Rare that a IT Guy goes and checks if the DNS is right or not for example. I got so called System Engineers on the Phone that tell me that they checked if a folder was shared and the Access Rights where set and i go and check and it`s nothing done.

That asking Google could be a good thing is something that 90% of the Peoples i have to deal with are not aware off.

So yes, You`re absolutely right. No one that has a little Clue about PC`s would let a IT Guy of a Product Support execute some registry Files on his Client/Server. But they don`t even know what the registry is in most of the Cases . You know in any Job you have to know how the machines that you use for work any day. Except for the PC.

[KenB]

Re: Scan to Folder Problem after MS Update

This is becoming quite an issue in general.

I just had the same issue with Equitrac, as even its scanning function uses SMB to communicate the scan from the MFP back to the DCE engine.

There is a KB article on Nuance's site about this.

I would think this will become more of an issue as we go.

Keep in mind that although the MS update came out on June 14, it may be a while before we see its full effect, as many customers don't necessarily update just as soon as a patch is available - some of them want to test before installing on a bunch of workstations and servers.

[PillePalle]

Re: Scan to Folder Problem after MS Update

Hi Guys

Here a few results and Explanations i tested last week




Hope this helps someone out that has to make some test`s and find solutions

[PillePalle]

Re: Scan to Folder Problem after MS Update

This is becoming quite an issue in general.

I just had the same issue with Equitrac, as even its scanning function uses SMB to communicate the scan from the MFP back to the DCE engine.

Yes i can confirm that as well.

I also think that this will make us trouble in the Future because as you said peoples tend to make updates later.