SMBv1 is an old network file system protocol and is used by the ex-NSA's hacking tool EternalBlue to spread ransomware throughout networks. Disabling it is advised but use with caution.
Windows 8, 10, and Server 2012
Windows XP, Vista, 7, and Server 2008 and 2008 R2:
To disable SMB1 server and/or client via Group Policy:
https://support.microsoft.com/en-za/help/2696547/how-to-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and-windows
Windows 8, 10, and Server 2012
- Open an administrator-level PowerShell window
- Type the following: Set-SmbServerConfiguration -EnableSMB1Protocol $false
- To confirm changes: Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol
Windows XP, Vista, 7, and Server 2008 and 2008 R2:
- Open an administrator-level PowerShell window
- Type the following: Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force
- Restart your PC
To disable SMB1 server and/or client via Group Policy:
https://support.microsoft.com/en-za/help/2696547/how-to-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and-windows
Comments