Disable SMB v1
Issue
For security reasons, as the protocol is deprecated, you want to disable SMBv1.
Testing
You can run the following commands to know if the protocol is active
Powershell
Get-SmbServerConfiguration | Select EnableSMB1Protocol
Get-WindowsOptionalFeature -Online -FeatureName smb1protocol
Command Line
sc.exe qc mrxsmb10
This should return an error if the protocol has already been deactivated :
[SC] OpenService FAILED 1060:
The specified service does not exist as an installed service.
Solutions
Please restart the computer after you changed the configuration.
Powershell (recommended for Windows 10 and Server 2016 +)
To disable run the below command
Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol
To re-enable, run this one
Enable-WindowsOptionalFeature -Online -FeatureName smb1protocol
Command Line (not recommended, for older operating systems)
Run the two following commands after another, as Administrator
sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc.exe config mrxsmb10 start= disabled
Registry (Great for Group Policy Object – GPO)
Run the registry editor as an administrator : regedit
Create a DWORD entry called SMB1 under the following registry key.
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters]
"SMB1"=dword:00000000
Alternatively, you can use the following PowerShell command line which does it for you.
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force
Sources
https://www.alibabacloud.com/help/faq-detail/57499.htm
Was this post helpful?
Let us know if you liked the post. That’s the only way we can improve.