How to Disable SMBv1 in Windows

SMBv1 (Server Message Block version 1) is one of the oldest protocols that is still enabled by default in Windows. Being an old and insecure protocol, recent disasters like WannaCry ransomware and Petya wiper used it to spread rapidly and infect thousands of systems worldwide. Since the world has already moved to a more secure SMB version 3, you can disable the old protocol and make your system more secure. In fact, Microsoft has been recommending users and organizations disable SMBv1 for several years. Here’s how to disable SMBv1 in Windows.

There are three methods to disable SMBv1 in Windows. The first method is using Windows features, the second method is using the PowerShell and the third is using Windows Registry. This article will show you all three methods; follow the one you are comfortable with.

Note: the same procedures are applicable for Windows 7 and 8.

You can easily turn off SMBv1 using Windows Features. To start, search for “Control Panel” in the Start menu and open it.

disable-smbv1-open-control-panel

In the Control Panel window find and click on the option “Programs and Features.”

disable-smbv1-select-programs-and-features

In this window click on the link “Turn Windows Features On or Off” appearing on the left panel.

disable-smbv1-click-on-windows-features-link

The above action will open the Windows Features window. Here, scroll down, find the “SMB 1.0/CIFS File Sharing Support” option, uncheck it and click on the “OK” button to save the changes.

disable-smbv1-uncheck-smb1

As soon as you save the changes, Windows will perform necessary changes and prompts you to restart your system. Just click on the “Restart Now” button to make the changes take effect.

disable-smbv1-click-restart-now-button

You can also use Windows PowerShell to disable SMBv1. Search for PowerShell in the Start menu, right-click on it and select the option “Run as Administrator.”

The above action will open PowerShell with admin rights. Use the below command to find out whether SMBv1 is enabled or disabled.

Get-SmbServerConfiguration

disable-smbv1-get-smb-status

As you can see from the above image, the SMBv1 protocol is enabled. To disable it, use the following command:

Set-SmbServerConfiguration -EnableSMB1Protocol $false

disable-smbv1-command-to-disable-smb

As soon as you execute the above command, you will be asked to verify your action. Simply type “Y” and press the Enter button.

disable-smbv1-confirm-action

SMBv1 is now disabled on your system. If you want to, you can use the first command to see if SMBv1 is disabled or not.

disable-smbv1-powershell-smb1-disabled

To re-enable SMBv1, you can use the command:

Set-SmbServerConfiguration -EnableSMB1Protocol $true

To disable SMBv1 using Windows Registry, search for regedit in the Start menu and open it.

After opening Windows Registry, navigate to the following location. If you are using Windows 10, then copy the below path, paste it in the address bar and press Enter.

disable-smbv1-navigate-to-key

In the right panel right-click and select the option “New” and then “DWORD (32-bit) Value.”

disable-smbv1-select-dword-value-option

Name the new value “SMB1” and press Enter.

disable-smbv1-name-dword-value

Double-click on the newly-created value, enter “0” in the Value Data field and click on the “Ok” button.

disable-smbv1-enter-value-data

Just restart your system and SMBv1 will be disabled. If you ever want to revert back, simply change the value data to “1.”

Do comment below sharing your thoughts and experiences about using the above method to disable SMBv1 in Windows.

Leave a Reply

Yeah! You've decided to leave a comment. That's fantastic! Check out our comment policy here. Let's have a personal and meaningful conversation.