Thursday, October 1, 2015

How to disable SMB1 for Windows 7 and Windows 8/10

The KB article at highlights how to disable various versions of the SMB versions for different editions of Windows.  To disable SMB1 on Windows 8/10 as a server, launch an elevated PowerShell session and use the following command:

Set-SmbServerConfiguration -EnableSMB1Protocol $false

The following command can verify that SMB1 is disabled:

Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol


To disable SMB1 for Windows 7, use the following command:

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 –Force


To disable SMB1 with Windows 7/8/10 as a client, launch an elevated command prompt and enter the following commands:

sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc.exe config mrxsmb10 start= disabled


No comments:

Post a Comment