The SMB protocol is used to share files and folders and use services remotely in Windows operating system. SMBv1 is the first version provided nearly 30 years ago. In September 2016 Microsoft provided the MS16-114 security update related to the SMBv1. According to this update and related vulnerability, SMBv1 is not considered secure and exploited in different ways. It is best to stop using SMBv1 by disabling or removing it from Windows. In this tutorial, we will learn how to stop SMBv1.
Remove SMBv1 with PowerShell
The PowerShell can be used in order to remove SMBv1. The “Remove-WindowsFeature” command can be used in the SMBv1 windows feature. The SMBv1 windows feature is named “FS-SMB1“.
Remove-WindowsFeature -Name FS-SMB1Remove SMBv1 with Add/Remove Programs
Alternatively the SMBv1 can be removed via the “Add/Remove Programs”. First we should open the “Program and Features”. It can be opened with the following command in the Run menu or by just typing its name to the Start menu.
appwiz.cplThen we will click to the “Turn Windows features on or off” from the left side panel like below.
From the Windows Features menu navigate to the “SMB 1.0/CIFS File Sharing Support” and uncheck it. The last step is clicking on the “OK” button which starts the removal of the SMBv1.
Disable SMBv1 Optional Feature
On the client side the SMBv1 can be disabled by using the PowerShell “Disable-WindowsOptionalFeature” command.
Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol