Guide | How To How to disable SMBv1 in Windows 10 and Windows Server

The associated guide may contain user-generated or external content.
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
 
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
 
Why disable SMB1.0 when you can remove it? :D
 

Attachments

  • SMB.png
    SMB.png
    36.5 KB · Views: 2,204
Didn't the Microsoft patch take care of this vulnerability? I mean, anyone who can follow this relatively advanced procedure, can surely run Windows update or download the patch.
Yes or just patch your system.
This is also a manual method for those who couldn't or cannot apply the patch, and as it seems, many people around the world, haven't done it.
 
  • Like
Reactions: frogboy and shmu26
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart
Anyone who decides to do the above needs to be aware that there may be some features that you want to keep. This include media player and print to PDF.
 
Personally, I am just going to update the system. Never had any good luck following registry tweaks or system tweaks. Always had problems even after following real guides. Just like security software always had immense slowdowns with anything other than Avast or Windows Defender.
 
People should always disable everything, they do not need/use.
Code:
Dism /Online /Disable-Feature /FeatureName:SMB1Protocol /Quiet /NoRestart

Dism /Online /Disable-Feature /FeatureName:FaxServicesClientPackage /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Internet-Explorer-Optional-amd64
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MicrosoftWindowsPowerShellV2Root /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MSRDC-Infrastructure /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-Foundation-InternetPrinting-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-PrintToPDFServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Printing-XPSServices-Features /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:SearchEngine-Client-Package /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WCF-TCP-PortSharing45 /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:MediaPlayback /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:WorkFolders-Client /Quiet /NoRestart
Dism /Online /Disable-Feature /FeatureName:Xps-Foundation-Xps-Viewer /Quiet /NoRestart

why do need to disable all of the settings described above , can anyone explain.
dont just blindly run the above posted commands ;):p
you dont NEED to disable the above, just shows a way to disable stuff you might not ever use...
ex: Fax Services, Work Folders, Print to XPS (i assume from the name), etc... some things you can just read the name/command and see what it is for, and to disable or not...
ex, Printing-Print To PDF Services ---> I use this all the time, so I wouldn't disable this...
But there are things you can disable, which you would never use. Look at the above posted control panel box sample image for examples..
 
  • Like
Reactions: Handsome Recluse
Does everyone realize that "The Microsoft SMB Protocol is a client-server implementation" and unless you are using client-server on a home system, disabling SMB on your home system is of little consequence ?
 
  • Like
Reactions: harlan4096