Unfortunately i cant bite the bullet, these machines are 50,000+ dollar cnc machines and the code to operate them doesn't support windows 10.
Regrettably, and I know you don't want to hear it, but you had years to sort this out.
The Win 7 EOL date was known years away.
And at that price I'd have been asking the suppliers some serious questions about their support package beyond Win 7, and with written answers in the contract, before parting with that much cash.
They have fleeced you, and they are the ones you should be directing your questions too.
You should be asking them how they are going to get SMB 3 support on Win 7 and maintain support for it rather than asking us how to reduce the security of your server.
Sorry that sounds brutal but it's the ugly truth. They are expecting you, and us, to compromise. Not them, or Microsoft. Funny eh?