search cancel

You want to know how to Disable SMBv1 on Windows

book

Article ID: 184517

calendar_today

Updated On:

Products

Data Loss Prevention Enforce Data Loss Prevention Network Discover Data Loss Prevention Endpoint Discover

Issue/Introduction

You want to know how to disable SMBv1 on the OS of your Windows Server.

Cause

SMBv1 is vulnerable, as per these published advisories:

Environment

  • Windows Server 2012 R2
  • Windows Server 2016

Resolution

Windows Server 2012 R2 / Windows Server 2016 Server Manager method for disabling SMB:

 

Windows Server 2012 R2 & 2016: PowerShell methods - links to Microsoft content:

Detect:

Get-WindowsFeature FS-SMB1

Disable:

Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol

Enable:

Enable-WindowsOptionalFeature -Online -FeatureName smb1protoco

Attachments