TairikuOkami

Level 21
Content Creator
Verified
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
 

shmu26

Level 74
Content Creator
Trusted
Verified
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
 

Winter Soldier

Level 25
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
Yes or just patch your system.
This is also a manual method for those who couldn't or cannot apply the patch, and as it seems, many people around the world, haven't done it.
 
Reactions: frogboy and shmu26

Danielx64

Level 10
Verified
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
Anyone who decides to do the above needs to be aware that there may be some features that you want to keep. This include media player and print to PDF.
 

DJ Panda

Level 29
Verified
Personally, I am just going to update the system. Never had any good luck following registry tweaks or system tweaks. Always had problems even after following real guides. Just like security software always had immense slowdowns with anything other than Avast or Windows Defender.
 

kamla5abi

Level 4
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
why do need to disable all of the settings described above , can anyone explain.
dont just blindly run the above posted commands ;):p
you dont NEED to disable the above, just shows a way to disable stuff you might not ever use...
ex: Fax Services, Work Folders, Print to XPS (i assume from the name), etc... some things you can just read the name/command and see what it is for, and to disable or not...
ex, Printing-Print To PDF Services ---> I use this all the time, so I wouldn't disable this...
But there are things you can disable, which you would never use. Look at the above posted control panel box sample image for examples..
 
Reactions: Handsome Recluse
5

509322

Does everyone realize that "The Microsoft SMB Protocol is a client-server implementation" and unless you are using client-server on a home system, disabling SMB on your home system is of little consequence ?
 
Reactions: harlan4096