Tutorial How to disable SMBv1 in Windows 10 and Windows Server

TairikuOkami

Level 17
Content Creator
Verified
Joined
May 13, 2017
Messages
802
OS
Windows 10
Antivirus
Default-Deny
#2
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
 

shmu26

Level 65
Verified
Joined
Jul 3, 2015
Messages
5,421
OS
Windows 10
#3
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
 
Joined
Feb 13, 2017
Messages
1,468
OS
Windows 10
Antivirus
Emsisoft
#6
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
Yes or just patch your system.
This is also a manual method for those who couldn't or cannot apply the patch, and as it seems, many people around the world, haven't done it.
 

Danielx64

Level 10
Verified
Joined
Mar 24, 2017
Messages
472
OS
Windows 10
Antivirus
ESET
#7
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
Anyone who decides to do the above needs to be aware that there may be some features that you want to keep. This include media player and print to PDF.
 
Joined
May 16, 2017
Messages
42
OS
Windows 10
Antivirus
Bitdefender
#8
im patch the system then block SMB , if i open my SMB again after blocking it will be safe ?
 

Umbra

Level 85
Content Creator
Verified
Joined
May 16, 2011
Messages
18,274
OS
Windows 10
Antivirus
Default-Deny
#10
Just a joke, using control panel just easy for everyone.
 
Likes: Danielx64

DJ Panda

Level 29
Verified
Joined
Aug 30, 2015
Messages
1,811
OS
Windows 10
Antivirus
Emsisoft
#11
Personally, I am just going to update the system. Never had any good luck following registry tweaks or system tweaks. Always had problems even after following real guides. Just like security software always had immense slowdowns with anything other than Avast or Windows Defender.
 
Joined
May 15, 2017
Messages
190
OS
Windows 10
Antivirus
Bitdefender
#14
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
why do need to disable all of the settings described above , can anyone explain.
dont just blindly run the above posted commands ;):p
you dont NEED to disable the above, just shows a way to disable stuff you might not ever use...
ex: Fax Services, Work Folders, Print to XPS (i assume from the name), etc... some things you can just read the name/command and see what it is for, and to disable or not...
ex, Printing-Print To PDF Services ---> I use this all the time, so I wouldn't disable this...
But there are things you can disable, which you would never use. Look at the above posted control panel box sample image for examples..
 

Lockdown

From AppGuard
Developer
Verified
Joined
Oct 24, 2016
Messages
3,559
#17
Does everyone realize that "The Microsoft SMB Protocol is a client-server implementation" and unless you are using client-server on a home system, disabling SMB on your home system is of little consequence ?
 
Likes: harlan4096

suma

Level 4
Verified
Joined
Feb 18, 2013
Messages
194
OS
Windows 10
Antivirus
Trend Micro
#20
Does 'Team Viewer' work after disable these features?