Windows 10: Enable or Disable SMB1 File Sharing Protocol in Windows  

    Enable or Disable SMB1 File Sharing Protocol in Windows

    Enable or Disable SMB1 File Sharing Protocol in Windows

    How to Enable or Disable SMB1 File Sharing Protocol in Windows
    Published by Category: Network & Sharing
    12 Apr 2018
    Designer Media Ltd

    Published by


    Brink's Avatar
    Administrator

    Posts: 28,611

    Show Printable Version 


    How to Enable or Disable SMB1 File Sharing Protocol in Windows


    The Server Message Block (SMB) Protocol is a network file sharing protocol, and as implemented in Microsoft Windows is known as Microsoft SMB Protocol. The set of message packets that defines a particular version of the protocol is called a dialect. The Common Internet File System (CIFS) Protocol is a dialect of SMB. Both SMB and CIFS are also available on VMS, several versions of Unix, and other operating systems.

    Although its main purpose is file sharing, additional Microsoft SMB Protocol functionality includes the following:

    For security reasons, Microsoft recommends that you disable SMB1 immediately. Ransomware targets the vulnerabilities of the SMB service of the Windows operating system to propagate. To defend yourself against WannaCrypt ransomware it is imperative that you disable SMB1 as well as install the patches released by Microsoft.

    When you use SMB1, you lose key protections offered by later SMB protocol versions:

    Starting in Windows 10 Fall Creators Update and Windows Server, version 1709 (RS3), the Server Message Block version 1 (SMB1) network protocol is no longer installed (enabled) by default. It was superseded by SMB2 and later protocols starting in 2007. Microsoft publicly deprecated the SMB1 protocol in 2014.

    SMB1 has the following behavior in Windows 10 Fall Creators Update and Windows Server, version 1709 (RS3):
    • SMB1 now has both client and server sub-features that can be uninstalled separately.
    • Windows 10 Enterprise and Windows 10 Education no longer contain the SMB1 client or server by default after a clean installation.
    • Windows Server 2016 no longer contains the SMB1 client or server by default after a clean installation.
    • Windows 10 Home and Windows 10 Professional no longer contain the SMB1 server by default after a clean installation.
    • Windows 10 Home and Windows 10 Professional still contain the SMB1 client by default after a clean installation. If the SMB1 client is not used for 15 days in total (excluding the computer being turned off), it automatically uninstalls itself.
    • In-place upgrades and Insider flights of Windows 10 Home and Windows 10 Professional do not automatically remove SMB1 initially. If the SMB1 client or server is not used for 15 days in total (excluding the time during which the computer is off), they each automatically uninstall themselves.
    • In-place upgrades and Insider flights of Windows 10 Enterprise and Windows 10 Education do not automatically remove SMB1. An administrator must decide to uninstall SMB1 in these managed environments.
    • Automatic removal of SMB1 after 15 days is a one-time operation. If an administrator re-installs SMB1, no further attempts will be made to uninstall it.
    • The SMB version 2.02, 2.1, 3.0, 3.02, and 3.1.1 features are still fully supported and included by default as part of the SMB2 binaries.
    • Because the Computer Browser service relies on SMB1, the service is uninstalled if the SMB1 client or server is uninstalled. This means that Explorer Network can no longer display Windows computers through the legacy NetBIOS datagram browsing method.
    • SMB1 can still be reinstalled in all editions of Windows 10 and Windows Server 2016.

    SMB1 has the following behavior change starting in Windows 10 Spring Creators Update version 1803 (RS4):
    • SMB1 will no longer be automatically disabled, but you will have to enable it (if wanted) and restart the computer to apply.

    If you try to connect to devices that support only SMB1, or if these devices try to connect to you, you may receive an error message if SMB1 is disabled.

    For more reference material about SMB1, see:

    This tutorial will show you how to enable or disable the SMB 1.0/CIFS File Sharing Support protocol feature in Windows 7, Windows 8, Windows 8.1, and Windows 10.

    You must be signed in as an administrator to enable or disable SMB1.


     CONTENTS:

    • Option One: To Enable or Disable SMB1 in Windows 7 using PowerShell
    • Option Two: To Enable or Disable SMB1 in Windows 8 using PowerShell
    • Option Three: To Enable or Disable SMB1 in Windows 8.1 and Windows 10 using Windows Features
    • Option Four: To Enable or Disable SMB1 in Windows 8.1 and Windows 10 using Command Prompt
    • Option Five: To Enable or Disable SMB1 in Windows 8.1 and Windows 10 using PowerShell





    Enable or Disable SMB1 File Sharing Protocol in Windows OPTION ONE Enable or Disable SMB1 File Sharing Protocol in Windows
    To Enable or Disable SMB1 in Windows 7 using PowerShell

    1. Open an elevated PowerShell.

    2. Type the command below you want to use into the elevated PowerShell, and press Enter.

    (Disable SMB1)
    Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 –Force

    OR

    (Enable SMB1)
    Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 1 –Force


    3. Close the elevated PowerShell, and restart the computer to apply.






    Enable or Disable SMB1 File Sharing Protocol in Windows OPTION TWO Enable or Disable SMB1 File Sharing Protocol in Windows
    To Enable or Disable SMB1 in Windows 8 using PowerShell

    1. Open an elevated PowerShell.

    2. Type the command below you want to use into the elevated PowerShell, and press Enter.

    (Disable SMB1)
    Set-SmbServerConfiguration -EnableSMB1Protocol $false

    OR

    (Enable SMB1)
    Set-SmbServerConfiguration -EnableSMB1Protocol $true

    3. Close the elevated PowerShell, and restart the computer to apply.






    Enable or Disable SMB1 File Sharing Protocol in Windows OPTION THREE Enable or Disable SMB1 File Sharing Protocol in Windows
    To Enable or Disable SMB1 in Windows 8.1 and Windows 10 using Windows Features

    1. Open the Control Panel (icons view), and click/tap on the Programs and Features icon.

    2. Click/tap on the Turn Windows features on or off link on the left side. (see screenshot below)

    This will open the C:\Windows\System32\OptionalFeatures.exe file.

    Name:  SMB1_Programs_and_Features-1.jpg
Views: 539
Size:  54.3 KB

    3. Check (enable) or uncheck (disable) the SMB 1.0/CIFS File Sharing Support feature for what you want, and click/tap on OK. (see screenshot below)

    If you like, you could also only check SMB 1.0/CIFS Client or SMB 1.0/CIFS Server for what you want.

    Name:  SMB1_Programs_and_Features-2.png
Views: 536
Size:  29.9 KB

    4. When ready, click/tap on the Restart now button to immediately restart the computer to apply. (see screenshot below)

    Name:  SMB1_Programs_and_Features-3.png
Views: 537
Size:  18.2 KB






    Enable or Disable SMB1 File Sharing Protocol in Windows OPTION FOUR Enable or Disable SMB1 File Sharing Protocol in Windows
    To Enable or Disable SMB1 in Windows 8.1 and Windows 10 using Command Prompt

    1. Open an elevated Command Prompt.

    2. Type the command below into the elevated command prompt, and press Enter to see if SMB1 is currently enabled or disabled. (see screenshots below)

    Dism /online /Get-Features /format:table | find "SMB1Protocol"

    Name:  SMB1_DISM-1.png
Views: 536
Size:  22.4 KB Name:  SMB1_DISM-2.png
Views: 537
Size:  22.6 KB

    3. Type the command below you want to use into the elevated command prompt, and press Enter. (see screenshots below)

    (Disable SMB1)
    Dism /online /Disable-Feature /FeatureName:"SMB1Protocol"

    OR

    (Enable SMB1)
    Dism /online /Enable-Feature /FeatureName:"SMB1Protocol" -All

    4. When prompted and ready, type y to immediately restart the computer to apply.

    Name:  SMB1_DISM-3.png
Views: 537
Size:  26.5 KB Name:  SMB1_DISM-4.png
Views: 538
Size:  26.7 KB






    Enable or Disable SMB1 File Sharing Protocol in Windows OPTION FIVE Enable or Disable SMB1 File Sharing Protocol in Windows
    To Enable or Disable SMB1 in Windows 8.1 and Windows 10 using PowerShell

    1. Open an elevated PowerShell.

    2. Type the command below into the elevated PowerShell, and press Enter to see if SMB1 is currently enabled or disabled. (see screenshots below)

    Get-WindowsOptionalFeature -Online -FeatureName "SMB1Protocol"

    Name:  SMB1_PowerShell-1.jpg
Views: 538
Size:  53.0 KB Name:  SMB1_PowerShell-2.jpg
Views: 539
Size:  56.9 KB

    3. Type the command below you want to use into the elevated PowerShell, and press Enter. (see screenshots below)

    (Disable SMB1)
    Disable-WindowsOptionalFeature -Online -FeatureName "SMB1Protocol"

    OR

    (Enable SMB1)
    Enable-WindowsOptionalFeature -Online -FeatureName "SMB1Protocol" -All

    4. When prompted and ready, type y and press Enter to immediately restart the computer to apply.

    Name:  SMB1_PowerShell-4.png
Views: 538
Size:  21.8 KB Name:  SMB1_PowerShell-3.png
Views: 538
Size:  22.2 KB


    That's it,
    Shawn






  1. Posts : 2,384
    Windows 10 Pro x64 1803 - XP/Vista/Win7/Win8.1 in VM for testing
       2 Weeks Ago #1

    Looking Good

    There is a change with the SCU on Windows 10 The feature set no longer contains "auto disable SMB1" Key which Is shown in the Screenshots but not mentioned in the text

    Also the fact that the SMB1 protocol is disabled, as well as preventing access to Linux shares (like a lot of NAS), can prevent the whole computers group showing under the Network tree in the File explorer, this is due to the file explorer still using the old Network "Master Browser" system from Windows NT, and the Homegroup system being removed You can still show them and access them via the FQDN, [Fully Qualified Domain Name] system - \\computer\share but not everyone will remember this, ( I took a while).

    I tried a few different systems to see my shares but only the enabling of the SMB1 Server and Client (I used Windows Features route), worked.

    The original Wanncry exploit has been closed and I run a decent AM system so I feel OK to run with it active but others would need to make their own mind up
      My ComputerSystem Spec


 

Tutorial Categories

Enable or Disable SMB1 File Sharing Protocol in Windows Tutorial Index Network & Sharing Instalation and Upgrade Browsers and Email General Tips Gaming Customization Apps and Features Virtualization BSOD System Security User Accounts Hardware and Drivers Updates and Activation Backup and Restore Performance and Maintenance Xbox Windows Phone


Related Threads
How to Enable or Disable NTFS File Compression in Windows Windows supports compression for individual files and folders on NTFS volumes using NTFS compression. While NTFS file system compression can save disk space, compressing data can...
How to Enable or Disable NTFS File Encryption in Windows The Encrypting File System (EFS) is the built-in encryption tool in Windows used to encrypt files and folders on NTFS drives to protect them from unwanted access. EFS enables transparent...
How to Enable or Disable Thumbnail Previews in File Explorer in Windows 10 File Explorer can display thumbnail images or icons for files and folders in Windows 10. This tutorial will show you how to enable or disable thumbnail previews in...
How to Enable or Disable TRIM Support for Solid State Drives (SSD) in Windows 10 The TRIM command is essential to maintain the performance of solid state drives (SSDs) at an optimal level over the lifetime of the drive. TRIM functions by actively...
Backup & Restore Enable or Disable File History in Windows 10 in Tutorials
File History was first introduced in Windows 8, and has been improved in Windows 10. You can use File History to automatically back up versions of your files on a schedule to a location you select to save to. You can select to save backups to an...

Tags for this Thread

Our Sites
Site Links
About Us
Windows 10 Forums is an independent web site and has not been authorized, sponsored, or otherwise approved by Microsoft Corporation. "Windows 10" and related materials are trademarks of Microsoft Corp.

© Designer Media Ltd
All times are GMT -5. The time now is 09:23.
Find Us