Audit SMBv1 usage, remove it safely from clients and servers, and enforce SMB signing without breaking printers, backups, or legacy line-of-business apps.