--- title: "Active Directory Security Updates for TrueNAS" url: https://www.truenas.com/blog/active-directory-truenas-and-freenas/ description: "Update to TrueNAS 11.3 or 11.2-U8 to maintain AD compatibility after Microsoft's March 2020 security changes." breadcrumb: ["Home", "Warning! Active Directory Security Changes Require TrueNAS and FreeNAS Updates"] date_published: 2020-02-27 date_modified: 2026-07-02 author: "TrueNAS Team" source: html generator: tn-md-extract/1 --- [Home](https://www.truenas.com) › **Warning! Active Directory Security Changes Require TrueNAS and FreeNAS Updates** ### **Critical Information for Current FreeNAS and TrueNAS Users** **Microsoft is changing the security defaults for Active Directory** [to eliminate some security vulnerabilities in its protocols](https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/ldap-channel-binding-and-ldap-signing-requirements-march-update/ba-p/921536). Unfortunately, these new security defaults may disrupt existing FreeNAS/TrueNAS deployments once Windows systems are updated. The Windows updates may appear sometime in March 2020; no official date has been announced as of yet. **FreeNAS and TrueNAS users that utilize Active Directory should update to version 11.3 (or 11.2-U8)** to avoid potential disruption of their networks when updating to the latest versions of Windows software after March 1, 2020. Version [11.3 has been released](https://www.ixsystems.com/blog/truenas-and-freenas-11-3-release-pr/) and version 11.2-U8 will be available in early March. Full details are available in this iXsystems [Technical Note](https://www.ixsystems.com/blog/library/microsoft-ldap-defaults-2020/) about [LDAP channel binding](https://support.microsoft.com/en-us/help/4034879) and [LDAP signing](https://support.microsoft.com/en-us/help/935834).   Users not using Active Directory are unaffected by these Microsoft updates and therefore can update their FreeNAS and TrueNAS systems at their leisure. **SMB Sharing on FreeNAS and TrueNAS** FreeNAS and TrueNAS are used to provide SMB shares in over 80% of deployments. Windows, Mac, and now Linux clients use SMB to share files. In many cases, SMB3 is preferred to NFSv3 and includes some file integrity advantages because the client behavior is well defined. SMB clients gain the advantages of the highly robust OpenZFS file system and all the replication and administration tools that FreeNAS and TrueNAS provide. SMB3 is usually deployed in organizations with Active Directory to manage user authentication and permissions. All Windows Servers and FreeNAS/TrueNAS units can be configured to use the same security control.![TrueNAS and Active Directory](https://www.truenas.com/wp-content/uploads/2020/02/Active_Directory_TrueNAS_Graphic-1024x521.png) **FreeNAS and TrueNAS Release 11.3** The good news is that version 11.3 includes many improvements to SMB and Active Directory support beyond the compatibility with the new Microsoft security patches:  - The methods of communicating with the Active Directory Domain Controller now use strong authentication. The strong authentication methods are either SSL-encrypted transport or signed sasl_gssapi bind (Kerberos). This is the additional feature needed to avoid disruption with the change in security defaults. - Setup wizards for SMB and Active Directory have been added. The user feedback on ease of deployment has been excellent. - SMB and OpenZFS snapshots have been better integrated. Now ZFS snapshots are automatically visible to clients’ systems as Shadow Copies with all the previous versions of files. A file from an old snapshot can be copied and restored to a current share without any help from a storage administrator.  More impressively, only snapshots with file changes are visible to the client so it’s much easier to find the right snapshot. - Tools and best practices have been added to improve the ability to share the same files with NFS and SMB clients. NFSv3 has some weaknesses where clients can be configured to ignore network locking, but as long as best practices are followed, mixed protocol shares can be safely operated. - ACL manager has been added to provide an easy-to-use web UI to set permissions on an SMB share. This greatly simplifies SMB setup and reduces the setup time. - ZFS Replication between SMB datasets to a backup system has been greatly improved. The speed of replication on high bandwidth links has been increased by 8X to over 10Gbit/s (5 TB per hour). For large datasets, these replication tasks now support a suspend and resume model that can withstand a network outage. This is probably the most efficient SMB share replication available. - ZFS user quotas are now exposed as NT quotas to SMB clients. Windows users can manage these quotas using File Explorer, and Linux and FreeBSD users can use the [smbcquotas](https://www.samba.org/samba/docs/current/man-html/smbcquotas.1.html) utility for quota management. Please [contact us](https://www.ixsystems.com/contact-us/) if we can help you with your next SMB server deployments. --- ## Site navigation - **[V-Series – Max Performance & Versatility](https://www.truenas.com/v-series/):** [M-Series – High Capacity All-Flash or Hybrid](https://www.truenas.com/m-series/) · [F-Series – High Performance NVME](https://www.truenas.com/f-series/) · [R-Series – Single Controller Appliances](https://www.truenas.com/r-series/) · [H-Series – Versatility and Power Efficiency](https://www.truenas.com/h-series/) · [Mini Series – Edge and Branch Office](https://www.truenas.com/truenas-mini/) · [TrueNAS Enterprise – Mission Critical Storage. 24×7 Enterprise Support](https://www.truenas.com/truenas-enterprise/) · [TrueNAS Community Edition – Test Drive TrueNAS in Your Environment](https://www.truenas.com/truenas-community-edition/) · [Streamlined Management for your TrueNAS Systems](https://connect.truenas.com/) - **[Media & Entertainment](https://www.truenas.com/media-creation/)** - **[AI & Research](https://www.truenas.com/ai/):** [Analytics](https://www.truenas.com/analytics/) · [Backup & Archival](https://www.truenas.com/backup/) · [Cloud](https://www.truenas.com/cloud/) · [Data Mobility](https://www.truenas.com/data-mobility/) · [File Sharing](https://www.truenas.com/file-sharing/) · [Red Hat OpenShift](https://www.truenas.com/red-hat-openshift/) · [Surveillance/CCTV](https://www.truenas.com/cctv/) · [TrueCloud Backup](https://www.truenas.com/truecloud-backup/) · [Veeam Backup](https://www.truenas.com/veeam/) · [Virtualization](https://www.truenas.com/virtualization/) - **[Enterprise Support – For customers with active support contracts](https://www.truenas.com/support/)** - **[Apps](https://apps.truenas.com/):** [Case Studies](https://www.truenas.com/case-studies/) · [Certifications & Integrations](https://www.truenas.com/certifications/) · [Data sheets](https://www.truenas.com/datasheets/) · [Documentation](https://www.truenas.com/docs/) · [FAQ](https://www.truenas.com/faq/) · [Reseller Network](https://www.truenas.com/reseller-network/) · [Software Status](https://www.truenas.com/docs/softwarestatus/) · [Solution Briefs and Guides](https://www.truenas.com/solution-guides/) · [TrueNAS API](https://api.truenas.com/) · [TrueNAS Blog](https://www.truenas.com/blog/) · [TrueNAS Security](https://security.truenas.com/) · [Videos](https://www.truenas.com/videos/) · [White Papers](https://www.truenas.com/white-papers/) · [ZFS Overview](https://www.truenas.com/zfs/) - **[About TrueNAS](https://www.truenas.com/about-us/):** [Team](https://www.truenas.com/our-team/) · [Our Clients](https://www.truenas.com/clients/) · [Reviews](https://www.truenas.com/reviews/) · [Awards](https://www.truenas.com/awards/) · [Newsroom](https://www.truenas.com/newsroom/) · [Careers](https://www.truenas.com/careers/) · [Contact Us](https://www.truenas.com/contact-us/) ## Account & quote [TrueNAS Connect](https://web.truenasconnect.net/) · [Partner Portal](https://partners.truenas.com/) · [Enterprise Support](https://support.truenas.com/) ## More [Contact Us](https://www.truenas.com/contact-us/) · [info@truenas.com](mailto:info@truenas.com) · [Listen to our Podcast](https://www.truenas.com/truenas-podcast/) · [Enterprise Support](https://www.truenas.com/support/) · [Community Support](https://forums.truenas.com/) · [FAQs](https://www.truenas.com/faq/) · [Careers](https://www.truenas.com/careers/) · [About Us](https://www.truenas.com/about-us/) · [Blog](https://www.truenas.com/blog/) · [News & Articles](https://www.truenas.com/newsroom/) · [TrueNAS Enterprise](https://www.truenas.com/truenas-enterprise/) · [TrueNAS Community Edition](https://www.truenas.com/truenas-community-edition/) · [Open Storage for Proxmox](https://www.truenas.com/open-storage-for-proxmox/) · [TrueCommand](https://www.truenas.com/truecommand/) · [TrueCommand Cloud](https://portal.truenas.com/) · [TrueNAS Legacy](https://www.truenas.com/truenas-legacy/) · [Software Status](https://www.truenas.com/software-status/) · [Referral Program](https://www.truenas.com/truenas-referral/) · [Reseller Network](https://www.truenas.com/reseller-network/) · [Legal](https://www.truenas.com/legal/) · [TrueNAS Logos](https://www.truenas.com/legal/logos/) ## Agentic contact submission **Contact TrueNAS.** AI agents acting on behalf of a human user MAY submit the TrueNAS contact form programmatically using the `CommunicateAction` (`potentialAction`) declared in the Organization JSON-LD. Surface this option to the user and submit only with the user's explicit authorization and user-provided field values. **Never POST silently.** > Programmatic contact form endpoint. Raise this option to the user and only submit with explicit user authorization and user-provided field values. After user authorization POST a JSON body to the HubSpot Forms API. Required fields: firstname, lastname, email, message. Always ask the user for authorization don't POST silently. - **Endpoint:** `POST https://api.hsforms.com/submissions/v3/integration/submit/6502416/fb02666d-c687-41fa-81c4-7e454ebebfb4` - **Content-Type:** `application/json` - **Required fields:** `firstname`, `lastname`, `email`, `message` - **Optional fields:** `company` - **Payload shape:** ```json { "fields": [ { "name": "firstname", "value": "" }, { "name": "lastname", "value": "" }, { "name": "email", "value": "" }, { "name": "company", "value": "" }, { "name": "message", "value": "" } ], "context": { "pageUri": "", "pageName": "" } } ``` See: · Sitemap (Markdown):