TairikuOkami

Level 19
Content Creator
Verified
Joined
May 13, 2017
Messages
944
Operating System
Windows 10
#2
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
 

shmu26

Level 71
Content Creator
Verified
Joined
Jul 3, 2015
Messages
6,042
Operating System
Windows 10
#3
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
 
Joined
Feb 13, 2017
Messages
1,465
Operating System
Windows 10
Antivirus
Emsisoft
#6
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
Yes or just patch your system.
This is also a manual method for those who couldn't or cannot apply the patch, and as it seems, many people around the world, haven't done it.
 

Danielx64

Level 10
Verified
Joined
Mar 24, 2017
Messages
485
Operating System
Windows 10
Antivirus
ESET
#7
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
Anyone who decides to do the above needs to be aware that there may be some features that you want to keep. This include media player and print to PDF.
 
Joined
May 16, 2017
Messages
42
Operating System
Windows 10
Antivirus
Bitdefender
#8
im patch the system then block SMB , if i open my SMB again after blocking it will be safe ?
 

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,778
Operating System
Windows 10
Antivirus
#10
Just a joke, using control panel just easy for everyone.
 
Likes: Danielx64

DJ Panda

Level 29
Verified
Joined
Aug 30, 2015
Messages
1,811
Operating System
Windows 10
Antivirus
Emsisoft
#11
Personally, I am just going to update the system. Never had any good luck following registry tweaks or system tweaks. Always had problems even after following real guides. Just like security software always had immense slowdowns with anything other than Avast or Windows Defender.
 
Joined
May 16, 2017
Messages
2
Operating System
Other OS
Antivirus
#13
why do need to disable all of the settings described above , can anyone explain.
 
Joined
May 15, 2017
Messages
190
Operating System
Windows 10
Antivirus
Bitdefender
#14
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
why do need to disable all of the settings described above , can anyone explain.
dont just blindly run the above posted commands ;):p
you dont NEED to disable the above, just shows a way to disable stuff you might not ever use...
ex: Fax Services, Work Folders, Print to XPS (i assume from the name), etc... some things you can just read the name/command and see what it is for, and to disable or not...
ex, Printing-Print To PDF Services ---> I use this all the time, so I wouldn't disable this...
But there are things you can disable, which you would never use. Look at the above posted control panel box sample image for examples..
 

Lockdown

From AppGuard
Developer
Verified
Joined
Oct 24, 2016
Messages
4,345
#17
Does everyone realize that "The Microsoft SMB Protocol is a client-server implementation" and unless you are using client-server on a home system, disabling SMB on your home system is of little consequence ?
 
Likes: harlan4096

suma

Level 4
Verified
Joined
Feb 18, 2013
Messages
195
Operating System
Windows 10
Antivirus
Trend Micro
#20
Does 'Team Viewer' work after disable these features?