Thursday, October 1, 2015

How to disable SMB1 for Windows 7 and Windows 8/10

The KB article at https://support.microsoft.com/en-us/kb/2696547 highlights how to disable various versions of the SMB versions for different editions of Windows.  To disable SMB1 on Windows 8/10 as a server, launch an elevated PowerShell session and use the following command:

Set-SmbServerConfiguration -EnableSMB1Protocol $false

The following command can verify that SMB1 is disabled:

Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol

disable_smb1_windows8

To disable SMB1 for Windows 7, use the following command:

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 –Force

disable_smb1_windows7

To disable SMB1 with Windows 7/8/10 as a client, launch an elevated command prompt and enter the following commands:

sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc.exe config mrxsmb10 start= disabled

disable_smb1_windows8_2

No comments:

Post a Comment