none
how to know if SMB1 is disabled? RRS feed

  • Question

  • i have disabled SMB1 via logon script in group policy and did "gpupdate /force", logoff and login again.

    since the logon script is in machine startup location, how to check if SMB1 is disabled in the Win7 workstation?

    note: logon script contains the ff code:

    sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
    sc.exe config mrxsmb10 start= disabled

    • Edited by Reno Mardo Sunday, May 14, 2017 7:22 PM
    Sunday, May 14, 2017 6:22 PM

All replies

  • Hi Reno Mardo,

    To disable SMBv1 on the SMB client, run the following commands and save it. BAT format:

    @echo off

    sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi

    sc.exe config mrxsmb10 start= disabled

    PowerShell.exe "Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force"

    Then We can view the status of SMB1 by using the following command:

    we could run the command on SMB Client: Sc.exe query MRXSMB10

    SMB Server: Run the following command to check the registry value:

    reg query HKEY_Local_machine\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\ /v SMB1

    Hope it will be helpful to you


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.





    Monday, May 15, 2017 8:36 AM
    Moderator
  • Hi Reno Mardo,

    Haven't received your message a few days, was your issue resolved?
    I am proposing previous helpful replies as "Answered". Please feel free to try it and let me know the result. If the reply is helpful, please remember to mark it as answer which can help other community members who have same questions and find the helpful reply quickly.
    Best regards,
    Carl


    Please remember to mark the replies as answers if they help.
    If you have feedback for TechNet Subscriber Support, contact tnmff@microsoft.com.

    Tuesday, June 6, 2017 8:46 AM
    Moderator
  • Hi Carl, for those who like PowerShell I add a Cmdlet

    Get-SmbServerConfiguration | Select EnableSMB1Protocol, EnableSMB2Protocol

    Regards
    Nino


    www.testerlab.it

    Saturday, September 23, 2017 4:10 PM