NIS 2013 settings and below are NOT optimal out of the box...

Came across the following article. http://www.brighthub.com/computing/smb-security/articles/107277.aspx

 

A little older but makes sense.