Skip to main content

How to disable SMBv1

SMBv1 is an old network file system protocol and is used by the ex-NSA's hacking tool EternalBlue to spread ransomware throughout networks.  Disabling it is advised but use with caution.

Windows 8, 10, and Server 2012
  • Open an administrator-level PowerShell window
  • Type the following: Set-SmbServerConfiguration -EnableSMB1Protocol $false
  • To confirm changes: Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol


Windows XP, Vista, 7, and Server 2008 and 2008 R2:
  • Open an administrator-level PowerShell window
  • Type the following: Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force
  • Restart your PC


To disable SMB1 server and/or client via Group Policy:
https://support.microsoft.com/en-za/help/2696547/how-to-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and-windows

Comments

Popular posts from this blog

Where are SCANPST.EXE and/or SCANOST.EXE?

I sometimes have to deal with customer computers whose Outlook PST or OST files have become corrupted.  Very often the fix is to run SCANPST.EXE on the offending PST/OST file.   However, every time I go to do this I forget where the two executable files are.  Here is where they are on a Vista machine running Office 2007: C:\Program Files\Microsoft Office\Office12 I hope this helps.

McAfee does my head in

I’ve said it before and I’ll say it again: to all intents and purposes installing McAfee Anti-virus software is pretty much as bad as getting a virus.  There, I said it.  Again. I’ve lost count of how many problems I’ve had with customer PCs over the years where the root of the problem was McAfee in one or another of its hideous incarnations.  But here’s one that’s fresh in my head because I’ve only just sorted it out… A customer had a PC that wouldn’t connect to the iTunes Store in iTunes.  He could do everything else with iTunes, just not connect to the store.  Actually, now I think of it he probably wouldn’t have been able to use the internet radio stations in iTunes either.  He could access the internet and send/receive emails just fine.  iTunes just refused to play ball.  When I ran the Diagnostics in iTunes I got an error –3221. Well what could cause this?  Probably a firewall I thought.  The customer had McAfee Security Center with VirusScan and Personal Firewall.  They also

APC PowerChute Network Shutdown - Authentication Phrase

​Was installing  APC PowerChute Network Shutdown (PCNS) on a customer’s server and couldn’t find a record of the Authentication Passphrase that I set ages back on their Smart UPSes Network Management 2 Card. So I went to reset it on the card and start anew… it took a lot of digging to find it on their particular release of firmware: Go into the UPS tab, then into “shutdown” inside the “Configuration” category: You may then need to change the passphrase being used on other servers. To do this, open up PCNS in your browser and click into the area shown below: