How to disable SMBv1

SMBv1 is an old network file system protocol and is used by the ex-NSA's hacking tool EternalBlue to spread ransomware throughout networks.  Disabling it is advised but use with caution.

Windows 8, 10, and Server 2012
  • Open an administrator-level PowerShell window
  • Type the following: Set-SmbServerConfiguration -EnableSMB1Protocol $false
  • To confirm changes: Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol


Windows XP, Vista, 7, and Server 2008 and 2008 R2:
  • Open an administrator-level PowerShell window
  • Type the following: Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force
  • Restart your PC


To disable SMB1 server and/or client via Group Policy:
https://support.microsoft.com/en-za/help/2696547/how-to-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and-windows

Comments