SMBv1 (Server Message Block version 1) is one of the oldest protocols that is still enabled by default in Windows. Being an old and insecure protocol, recent disasters like WannaCry ransomware and Petya wiper used it to spread rapidly and infect thousands of systems worldwide. Since the world has already moved to a more secure SMB version 3, you can disable the old protocol and make your system more secure. In fact, Microsoft has been recommending users and organizations disable SMBv1 for several years. Here’s how to disable SMBv1 in Windows.
There are three methods to disable SMBv1 in Windows. The first method is using Windows features, the second method is using the PowerShell and the third is using Windows Registry. This article will show you all three methods; follow the one you are comfortable with.
Note: the same procedures are applicable for Windows 7 and 8.
Disable SMBv1 via Windows Features
You can easily turn off SMBv1 using Windows Features. To start, search for “Control Panel” in the Start menu and open it.
In the Control Panel window find and click on the option “Programs and Features.”
In this window click on the link “Turn Windows Features On or Off” appearing on the left panel.
The above action will open the Windows Features window. Here, scroll down, find the “SMB 1.0/CIFS File Sharing Support” option, uncheck it and click on the “OK” button to save the changes.
As soon as you save the changes, Windows will perform necessary changes and prompts you to restart your system. Just click on the “Restart Now” button to make the changes take effect.
Disable SMBv1 via PowerShell
You can also use Windows PowerShell to disable SMBv1. Search for PowerShell in the Start menu, right-click on it and select the option “Run as Administrator.”
The above action will open PowerShell with admin rights. Use the below command to find out whether SMBv1 is enabled or disabled.
As you can see from the above image, the SMBv1 protocol is enabled. To disable it, use the following command:
Set-SmbServerConfiguration -EnableSMB1Protocol $false
As soon as you execute the above command, you will be asked to verify your action. Simply type “Y” and press the Enter button.
SMBv1 is now disabled on your system. If you want to, you can use the first command to see if SMBv1 is disabled or not.
To re-enable SMBv1, you can use the command:
Set-SmbServerConfiguration -EnableSMB1Protocol $true
Disable SMBv1 via Windows Registry
To disable SMBv1 using Windows Registry, search for
regedit in the Start menu and open it.
After opening Windows Registry, navigate to the following location. If you are using Windows 10, then copy the below path, paste it in the address bar and press Enter.
In the right panel right-click and select the option “New” and then “DWORD (32-bit) Value.”
Name the new value “SMB1” and press Enter.
Double-click on the newly-created value, enter “0” in the Value Data field and click on the “Ok” button.
Just restart your system and SMBv1 will be disabled. If you ever want to revert back, simply change the value data to “1.”
Do comment below sharing your thoughts and experiences about using the above method to disable SMBv1 in Windows.