SMBv1 (Server Message Block version 1) is one of the oldest protocols that is still enabled by default in Windows. Being an old and insecure protocol, recent disasters like WannaCry ransomware and Petya wiper used it to spread rapidly and infect thousands of systems worldwide. Since the world has already moved to a more secure SMB version 3, you can disable the old protocol and make your system more secure. In fact, Microsoft has been recommending users and organizations disable SMBv1 for several years. Here’s how to disable SMBv1 in Windows.
There are three methods to disable SMBv1 in Windows. The first method is using Windows features, the second method is using the PowerShell and the third is using Windows Registry. This article will show you all three methods; follow the one you are comfortable with.
Note: the same procedures are applicable for Windows 7 and 8.
Disable SMBv1 via Windows Features
You can easily turn off SMBv1 using Windows Features. To start, search for “Control Panel” in the Start menu and open it.
In the Control Panel window find and click on the option “Programs and Features.”
In this window click on the link “Turn Windows Features On or Off” appearing on the left panel.
The above action will open the Windows Features window. Here, scroll down, find the “SMB 1.0/CIFS File Sharing Support” option, uncheck it and click on the “OK” button to save the changes.
As soon as you save the changes, Windows will perform necessary changes and prompts you to restart your system. Just click on the “Restart Now” button to make the changes take effect.
Disable SMBv1 via PowerShell
You can also use Windows PowerShell to disable SMBv1. Search for PowerShell in the Start menu, right-click on it and select the option “Run as Administrator.”
The above action will open PowerShell with admin rights. Use the below command to find out whether SMBv1 is enabled or disabled.
As you can see from the above image, the SMBv1 protocol is enabled. To disable it, use the following command: