How to Disable SMBv1 on Windows

book

Article ID: 184517

calendar_today

Updated On:

Products

Data Loss Prevention Endpoint Prevent Data Loss Prevention Network Monitor Data Loss Prevention Network Prevent for Email Data Loss Prevention Enforce Data Loss Prevention Network Discover Data Loss Prevention Network Prevent for Web Data Loss Prevention Network Protect Data Loss Prevention Endpoint Discover

Issue/Introduction

SMBv1 is vulnerable

CVE-2018-0749

https://portal.msrc.microsoft.com/en-US/security-guidance/advisory/CVE-2018-0749

https://nvd.nist.gov/vuln/detail/CVE-2018-0749

Environment

Windows Server 2012 R2

Windows Server 2016

Resolution

Windows Server 2012 R2 / Windows Server 2016 Server Manager method for disabling SMB:

Windows Server 2012 R2 & 2016: PowerShell methods

Detect:

Get-WindowsFeature FS-SMB1

Disable:

Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol

Enable:

Enable-WindowsOptionalFeature -Online -FeatureName smb1protoco

Attachments