none
SMB v1 Detection RRS feed

  • Question

  • Hi All,

    I'm getting some conflicting results when confirming if SMB v1 is enable on Windows 10.

    If I run the powershell command Get-SmbServerConfiguration, EnableSMB1Protocol states TRUE.

    If I run the powershell command Get-WindowsOptionalFeature –Online –FeatureName SMB1Protocol the state is Disabled.

    Checking the registry hive HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters, there is no entry for SMBv1 so my assumption is that it is disabled.

    My question is, what is the source of truth here? My assumption is that it is off, but why the result for the first powershell command.

    Thanks in advance

    Andrew

    Friday, June 1, 2018 1:35 AM

Answers

  • Hi!

    In Windows 10 Fall Creators Update and Windows Server, version 1709 (RS3) and later versions, the Server Message Block version 1 (SMBv1) network protocol is no longer installed by default. 

    The correct way of detecting if it's enabled / disabled in Windows 10 is the following command:

    Get-WindowsOptionalFeature –Online –FeatureName SMB1Protocol

    Disabling the SMBv1 with GPO will cover the registry entry.

    Hope this helps.


    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com  LinkedIn:   

    Friday, June 1, 2018 6:47 AM

All replies

  • Hi!

    In Windows 10 Fall Creators Update and Windows Server, version 1709 (RS3) and later versions, the Server Message Block version 1 (SMBv1) network protocol is no longer installed by default. 

    The correct way of detecting if it's enabled / disabled in Windows 10 is the following command:

    Get-WindowsOptionalFeature –Online –FeatureName SMB1Protocol

    Disabling the SMBv1 with GPO will cover the registry entry.

    Hope this helps.


    Best regards,
    Leon


    Blog: https://thesystemcenterblog.com  LinkedIn:   

    Friday, June 1, 2018 6:47 AM
  • Thanks Leon,

    I thought this was the answer, it's just the result for the first command that threw some doubt in for me.

    Thanks for taking the time.

    Sunday, June 3, 2018 10:05 PM
  • You're welcome!

    Blog: https://thesystemcenterblog.com  LinkedIn:   

    Sunday, June 3, 2018 10:08 PM