← All Tweaks

Windows Features

Disable SMB1 Protocol

Remove the insecure SMB1 protocol which has known vulnerabilities

Benefit

Significantly improves security by removing outdated and vulnerable network protocol

Impact

high

Commands (1)

$ErrorActionPreference='Continue'; $features = @('SMB1Protocol','SMB1Protocol-Client','SMB1Protocol-Server'); foreach ($f in $features) { $w = Get-WindowsOptionalFeature -Online -FeatureName $f -ErrorAction SilentlyContinue; if (-not $w) { Write-Host "[SKIP] $f - not available on this system"; continue } if ($w.State -eq 'Disabled' -or $w.State -eq 'DisabledWithPayloadRemoved') { Write-Host "[OK] $f - already disabled"; continue } try { Disable-WindowsOptionalFeature -Online -FeatureName $f -NoRestart -WarningAction SilentlyContinue -ErrorAction Stop | Out-Null; Write-Host "[OK] Disabled $f" } catch { Write-Host "[ERR] $f - $($_.Exception.Message)" } }

Warnings

  • SMB1 has been the target of multiple ransomware attacks (WannaCry, etc.). Disabling is strongly recommended.