How to Disable SMB V1 and Check for SMB V2/V3

Time to read: 2 mins

SMB is “Server Message Block” – In computer networking, it is a communication protocol for providing shared access to files, printers between the network – providing an authenticated communication mechanism – before the introduction of Active Directory.

Microsoft recommends that you Disable SMB V1 as this is an old protocol – but they do not recommend to disable SMB V2 / V3 – Only for troubleshooting.

To do this, you will need to Open Powershell as Administrator and run any of the following commands in Powershell

Commands for SMB Version 1

Detect SMB V1:

 Get-WindowsOptionalFeature –Online –FeatureName SMB1Protocol

To Disable SMB V1:

 Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

Enable SMB V1:

 Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

Commands for SMB Version 2/3

Detect SMB V2/V3

 Get-SmbServerConfiguration | Select EnableSMB2Protocol

Disable SMB V2/V3

 Set-SmbServerConfiguration –EnableSMB2Protocol $false

Enable SMB V2/V3

 Set-SmbServerConfiguration –EnableSMB2Protocol $true
Running the detect SMB V1 command in Powershell.
The result of a detect SMB V1 shows this is “Disabled” if it is set to “Enabled” it is recommended that you Disable this protocol and reboot the machine.
You can also run a detection to see if SMB Version 2/3 is enabled and the result is returned as “True” if this is enabled and “False” if this is not enabled.

Leave a Reply

Your email address will not be published. Required fields are marked *