- Feb 13, 2017
- 1,486
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
Yes or just patch your system.Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
Anyone who decides to do the above needs to be aware that there may be some features that you want to keep. This include media player and print to PDF.People should always disable everything, they do not need/use.
Code:Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64 Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
What is the difference between disabling via Control Panel and DISM? Both ways will remove srv.sys (SMBv1 driver)Why disable SMB1.0 when you can remove it?
People should always disable everything, they do not need/use.
Code:Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64 Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
dont just blindly run the above posted commandswhy do need to disable all of the settings described above , can anyone explain.
It is the same I posted above.I found this one here at MT a few days ago and it worked like a charm.
I let it here just in case anyone could need it.
How to disable SMBv1 in Windows 10 and Windows Server - Windows 8.1, Windows Server - Sysadmins of the North