What is SMB1 and How to Disable It on Windows 10?

• SMB1 is an old and insecure protocol for file and printer sharing on Windows networks, and it should be disabled or removed from all devices.
• SMB2, SMB3, and SMB3.1.1 are newer and safer versions of SMB that are backward compatible with each other, but not with SMB1.
• There are different methods to disable or remove SMB1 on Windows 10, such as using Control Panel, PowerShell, or Registry Editor.

SMB1, or Server Message Block version 1, is an outdated protocol that allows file and printer sharing on Windows networks. It was first introduced by IBM in 1984 and later adopted by Microsoft for its Windows operating systems. However, SMB1 has many security vulnerabilities and performance issues that make it unsafe and inefficient to use. In this article, we will explain what SMB1 is, why you should disable it on Windows 10, and how to do it.

What is SMB1 and Why is it a Security Risk?

SMB1 is a network protocol that enables file and printer sharing between computers on a local area network (LAN) or over the Internet. It allows users to access shared resources, such as files, folders, printers, and serial ports, on remote servers or devices. SMB1 also supports inter-process communication (IPC), which allows processes running on different computers to exchange data.

However, SMB1 has several limitations and security flaws that make it a risky protocol to use. Some of the problems with SMB1 are:

• It lacks encryption, which means that anyone who can intercept the network traffic can read or modify the data transmitted over SMB1.
• It is inefficient and slow, which affects the network performance and bandwidth consumption.
• It has a complex and buggy implementation, which makes it prone to errors and vulnerabilities.
• It has been exploited by many malware and ransomware attacks, such as WannaCry, NotPetya, and EternalBlue.

Because of these reasons, Microsoft has deprecated SMB1 in its newer versions of Windows and recommends disabling or removing it from all devices. SMB1 is not installed by default in Windows 11 or Windows Server 2019 and later. SMB1 is also not installed by default in Windows 10, except for Home and Pro editions.

What are the Alternatives to SMB1?

SMB1 is not the only version of the SMB protocol. There are newer versions that have improved features and security measures. These are:

• SMB2: This version was introduced with Windows Vista and Windows Server 2008. It has reduced complexity, increased efficiency, and enhanced security compared to SMB1. It also supports larger file sizes, better scalability, and more robust error handling.
• SMB3: This version was introduced with Windows 8 and Windows Server 2012. It has added more security features, such as encryption, secure dialect negotiation, and pre-authentication integrity. It also supports transparent failover, scale-out, multichannel, SMB direct, directory leasing, and performance optimizations.
• SMB3.1.1: This is the latest version of SMB3, introduced with Windows 10 and Windows Server 2016. It has further security enhancements, such as protection against man-in-the-middle attacks and support for AES-128-GCM encryption and SHA-512 hashing.

These newer versions of SMB are backward compatible with each other, which means that they can communicate with devices that support older versions of SMB. However, they are not compatible with SMB1, which means that if you disable or remove SMB1 from your device, you will not be able to access shared resources on devices that only support SMB1.

Therefore, before you disable or remove SMB1 from your device, you should make sure that you do not need it for any file or printer sharing purposes. You should also update any devices that still require SMB1 to support newer versions of SMB.

How to Disable or Remove SMB1 on Windows 10?

There are different ways to disable or remove SMB1 on Windows 10, depending on your edition and configuration. Here are some of the methods you can use:

Method 1: Using Control Panel

This method is suitable for Windows 10 Home and Pro editions that have SMB1 installed by default. To disable or remove SMB1 using Control Panel, follow these steps:

1. Press Windows Key + R to open the Run dialog box.
2. Type optionalfeatures.exe and click OK to open the Windows Features window.
3. Scroll down the list and find the option for SMB 1.0/CIFS File Sharing Support.
4. To disable SMB1 client support, uncheck the box for SMB 1.0/CIFS Client.
5. To disable SMB1 server support, uncheck the box for SMB 1.0/CIFS Server.
6. To remove SMB1 completely from your device, uncheck the box for SMB 1.0/CIFS File Sharing Support.
7. Click OK to save your changes and restart your device.

Method 2: Using PowerShell

This method is suitable for any edition of Windows 10 that supports PowerShell commands. To disable or remove SMB1 using PowerShell, follow these steps:

1. Press Windows Key + X and select Windows PowerShell (Admin) from the menu.
2. To check if SMB1 is enabled on your device, type the following command and press Enter:

   Get-SmbServerConfiguration | Select EnableSMB1Protocol

3. If the output is True, it means that SMB1 is enabled. If the output is False, it means that SMB1 is disabled.
4. To disable SMB1 client support, type the following command and press Enter:

   Set-SmbClientConfiguration -EnableSMB1Protocol $false -Force

5. To disable SMB1 server support, type the following command and press Enter:

   Set-SmbServerConfiguration -EnableSMB1Protocol $false -Force

6. To remove SMB1 completely from your device, type the following command and press Enter:

   Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol

7. Restart your device to apply the changes.

Method 3: Using Registry Editor

This method is suitable for advanced users who are comfortable with editing the Windows registry. To disable or remove SMB1 using Registry Editor, follow these steps:

1. Press Windows Key + R to open the Run dialog box.
2. Type regedit and click OK to open the Registry Editor.
3. Navigate to the following key:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters

4. To disable SMB1 client support, right-click on an empty space and select New > DWORD (32-bit) Value. Name it SMB1 and set its value to 0.
5. To disable SMB1 server support, right-click on an empty space and select New > DWORD (32-bit) Value. Name it SMB2 and set its value to 0.
6. To remove SMB1 completely from your device, navigate to the following key:

   HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation

7. Right-click on the DependOnService value and select Modify. Delete the entry for MRxSmb10 and click OK.
8. Restart your device to apply the changes.

Frequently Asked Questions (FAQs)

Here are some frequently asked questions about SMB1 and how to disable or remove it on Windows 10.

Question: What is SMB1 used for?

Answer: SMB1 is a network protocol that allows file and printer sharing on Windows networks. It was first introduced by IBM in 1984 and later adopted by Microsoft for its Windows operating systems.

Question: Why should I disable or remove SMB1 on Windows 10?

Answer: SMB1 has many security vulnerabilities and performance issues that make it unsafe and inefficient to use. It has been exploited by many malware and ransomware attacks, such as WannaCry, NotPetya, and EternalBlue. Microsoft has deprecated SMB1 in its newer versions of Windows and recommends disabling or removing it from all devices.

Question: What are the alternatives to SMB1?

Answer: There are newer versions of SMB that have improved features and security measures. These are SMB2, SMB3, and SMB3.1.1. These versions are backward compatible with each other, but not with SMB1.

Question: How can I disable or remove SMB1 on Windows 10?

Answer: There are different ways to disable or remove SMB1 on Windows 10, depending on your edition and configuration. You can use Control Panel, PowerShell, or Registry Editor to do so.

Question: How can I check if SMB1 is enabled or disabled on my device?

Answer: You can use PowerShell to check if SMB1 is enabled or disabled on your device. Type the following command and press Enter:

Get-SmbServerConfiguration | Select EnableSMB1Protocol

If the output is True, it means that SMB1 is enabled. If the output is False, it means that SMB1 is disabled.

Conclusion

SMB1 is an outdated protocol that allows file and printer sharing on Windows networks. It has many security vulnerabilities and performance issues that make it unsafe and inefficient to use. Microsoft has deprecated SMB1 in its newer versions of Windows and recommends disabling or removing it from all devices. There are newer versions of SMB that have improved features and security measures. These are SMB2, SMB3, and SMB3.1.1. These versions are backward compatible with each other, but not with SMB1.

To disable or remove SMB1 on Windows 10, you can use Control Panel, PowerShell, or Registry Editor. Before you do so, make sure that you do not need SMB1 for any file or printer sharing purposes. You should also update any devices that still require SMB1 to support newer versions of SMB.

Disclaimer: This article is for informational purposes only. We do not recommend disabling or removing any network protocols without proper knowledge and understanding of their functions and implications. We are not responsible for any damages or losses caused by following the instructions in this article. Please proceed at your own risk.

What is SMB1 and How to Disable It on Windows?