Attention to changes related to Microsoft Update for Netlogon Vulnerabilities(CVE-2020-1472)
Thank you for using Enterprise Cloud (ECL) service.
Please be informed that Microsoft has announced an update to address the Netlogon vulnerability CVE-2020-1472 section, which may affect your access to domain controllers via NTLM authentication as well as your access to ECL1.0 CIFS service.
We recommend the customers using NTLM authentication to check the latest vulnerability CVE-2020-1472 information and take appropriate action needed. There is no impact for the customers who use Kerberos authentication.
Please refer to the following pages for details.
Premium Storage / File server service (CIFS)
Standard Storage / Archive storage (CIFS)
Please take either of the following actions to avoid any impacts from this Microsoft update.
– Use Kerberos authentication on your domain controllers to access ECL1.0 CIFS service
– Add NTT Communications’ filer server machine account to the group policy “Domain controller: Allow vulnerable Netlogon secure channel connections” on your domain controllers