Jump to content

Windows 10 tip: Stop using the horribly insecure SMBv1 protocol


RV_

Recommended Posts

For years, Microsoft has been recommending that you disable the vulnerable SMBv1 protocol. Recent ransomware outbreaks underscore the need to take this important step. Here's how. This is easy and reversible easily.

Excerpt:

" To permanently remove SMBv1 support from Windows 10, use either of these two approaches

Open Control Panel (just start typing Control in the search box to find its shortcut quickly). Click Programs, and then click Turn Windows features on or off (under the Programs heading). Clear the check box for SMB 1.0/CIFS File Sharing Support, as shown here. That's it; you're protected.

(Note that you can use that same procedure in Windows 8.1. For Windows 7, you can't remove SMBv1, but you can disable it using the instructions in this article: How to enable and disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server.)

Disabling SMBv1 shouldn't have any effect on modern, fully updated hardware. Some consumer-grade network attached storage devices use this protocol by default, but a firmware update or a change in settings might allow you to change it to something more secure. Unfortunately, some older database programs and even new devices such as those from Sonos require SMBv1.

If you discover that you have an app or a network device that won't work without this feature, use Control Panel to turn the feature back on. Then consider whether that app or device is worth the impact on your network security and whether it's time to look for a replacement."

The other ways for groups and using powershell are in the article with much more and active links to related info:

http://www.zdnet.com/article/windows-10-tip-stop-using-the-horribly-insecure-smbv1-protocol/?ftag=TRE-03-10aaa6b&bhid=19724681974700635514865380622813

RV/Derek
http://www.rvroadie.com Email on the bottom of my website page.
Retired AF 1971-1998


When you see a worthy man, endeavor to emulate him. When you see an unworthy man, look inside yourself. - Confucius

 

“Those who can make you believe absurdities, can make you commit atrocities.” ... Voltaire

Link to comment
Share on other sites

Jim,

Yes it reboots with no problem for me. MY XPS 2720 is getting long in the tooth and even though a 2013 and a half model, I had no issues. I also highlighted in red the part about just going back and rechecking it if any device like a drive dock or drive wire or external old USB drive. It will need a reboot if you re-check it too.

Lots of little things can plug any remaining chinks in the system's armor. Se my new post I'm about to post about refreshing a Windows computer.

RV/Derek
http://www.rvroadie.com Email on the bottom of my website page.
Retired AF 1971-1998


When you see a worthy man, endeavor to emulate him. When you see an unworthy man, look inside yourself. - Confucius

 

“Those who can make you believe absurdities, can make you commit atrocities.” ... Voltaire

Link to comment
Share on other sites

Archived

This topic is now archived and is closed to further replies.

RVers Online University

campgroundviews.com

RV Destinations

Find out more or sign up for Escapees RV'ers Bootcamp.

Advertise your product or service here.

The Rvers- Now Streaming

RVTravel.com Logo



×
×
  • Create New...