Tutorial How to disable SMBv1 in Windows 10 and Windows Server

TairikuOkami

Level 31
Verified
Top poster
Content Creator
Well-known
May 13, 2017
2,077
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
 

shmu26

Level 85
Verified
Helper
Top poster
Content Creator
Well-known
Jul 3, 2015
8,181
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
 
D

Deleted member 178

Why disable SMB1.0 when you can remove it? :D
 

Attachments

  • SMB.png
    SMB.png
    36.5 KB · Views: 1,944

Winter Soldier

Level 25
Thread author
Verified
Top poster
Well-known
Feb 13, 2017
1,490
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
Yes or just patch your system.
This is also a manual method for those who couldn't or cannot apply the patch, and as it seems, many people around the world, haven't done it.
 
  • Like
Reactions: frogboy and shmu26

Danielx64

Level 10
Verified
Well-known
Mar 24, 2017
492
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
Anyone who decides to do the above needs to be aware that there may be some features that you want to keep. This include media player and print to PDF.
 

DJ Panda

Level 30
Verified
Top poster
Well-known
Aug 30, 2015
1,928
Personally, I am just going to update the system. Never had any good luck following registry tweaks or system tweaks. Always had problems even after following real guides. Just like security software always had immense slowdowns with anything other than Avast or Windows Defender.
 

kamla5abi

Level 4
May 15, 2017
190
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart

why do need to disable all of the settings described above , can anyone explain.
dont just blindly run the above posted commands ;):p
you dont NEED to disable the above, just shows a way to disable stuff you might not ever use...
ex: Fax Services, Work Folders, Print to XPS (i assume from the name), etc... some things you can just read the name/command and see what it is for, and to disable or not...
ex, Printing-Print To PDF Services ---> I use this all the time, so I wouldn't disable this...
But there are things you can disable, which you would never use. Look at the above posted control panel box sample image for examples..
 
  • Like
Reactions: Handsome Recluse
5

509322

Does everyone realize that "The Microsoft SMB Protocol is a client-server implementation" and unless you are using client-server on a home system, disabling SMB on your home system is of little consequence ?
 
  • Like
Reactions: harlan4096