We have Site A (2 DC`s, SCCM, Antivirus server++) and are now configuring Site B (1 DC)
We want to disable the possibility to browse the servers between these two sites, I mean not be able to for exampla \\serverhostname\c$
Is it only port 445 that we need to block or do we need to block 137,138 and 139 also ?
I have read that blocking SMB does not mess with group policy since we are having windows server 2008-> and Windows 10-> machines
But I was wondering if it would cause any other problems related to AD ?
As I understand blocking SMB between 2 sites is a good practice so ransomware does spread...
Thanks for any reply