SMBv1 deaktivieren/deinstallieren: Unterschied zwischen den Versionen
Admin (Diskussion | Beiträge) K |
Admin (Diskussion | Beiträge) K |
||
Zeile 5: | Zeile 5: | ||
=== Deaktivieren === | === Deaktivieren === | ||
<source lang="powershell">Set-SmbServerConfiguration -EnableSMB1Protocol $false</source> | <source lang="powershell">Set-SmbServerConfiguration -EnableSMB1Protocol $false</source> | ||
+ | |||
+ | ==== Server 2008 R2 und älter / Windows 7 und älter ==== | ||
+ | <source lang="powershell">Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force</source> | ||
=== Deinstallieren === | === Deinstallieren === | ||
Zeile 13: | Zeile 16: | ||
== DSC == | == DSC == | ||
=== Deaktivieren === | === Deaktivieren === | ||
− | <source lang="powershell> | + | <source lang="powershell"> |
Configuration Disable-SMBv1 #Registry-Value setzen | Configuration Disable-SMBv1 #Registry-Value setzen | ||
{ | { | ||
Zeile 37: | Zeile 40: | ||
+ | |||
+ | Weitere Infos: https://support.microsoft.com/de-ch/help/2696547/how-to-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and-windows | ||
Version vom 28. August 2017, 09:59 Uhr
Empfohlen wird das Feature zu deaktivieren und zu deinstallieren. (Sicherheitstechnisch)
Inhaltsverzeichnis
PowerShell
Deaktivieren
Set-SmbServerConfiguration -EnableSMB1Protocol $false
Server 2008 R2 und älter / Windows 7 und älter
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force
Deinstallieren
Remove-WindowsFeature -Name FS-SMB1
DSC
Deaktivieren
Configuration Disable-SMBv1 #Registry-Value setzen { Registry 'SMB1'{ Ensure = 'Present' Key = HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters' ValueName = 'SMB1' ValueType = 'Dword' ValueData = '0' } }
Deinstallieren
Ungültige Sprache.
Die gewünschte Sprache muss wie folgt definiert werden: <source lang="html4strict">...</source>
Unterstützte Sprachen für die Syntaxhervorhebung:
4cs, 6502acme, 6502kickass, 6502tasm, 68000devpac, abap, actionscript, actionscript3, ada, algol68, apache, applescript, apt_sources, arm, asm, asp, asymptote, autoconf, autohotkey, autoit, avisynth, awk, bascomavr, bash, basic4gl, bf, bibtex, blitzbasic, bnf, boo, c, c_loadrunner, c_mac, caddcl, cadlisp, cfdg, cfm, chaiscript, cil, clojure, cmake, cobol, coffeescript, cpp, cpp-qt, csharp, css, cuesheet, d, dcl, dcpu16, dcs, delphi, diff, div, dos, dot, e, ecmascript, eiffel, email, epc, erlang, euphoria, f1, falcon, fo, fortran, freebasic, freeswitch, fsharp, gambas, gdb, genero, genie, gettext, glsl, gml, gnuplot, go, groovy, gwbasic, haskell, haxe, hicest, hq9plus, html4strict, html5, icon, idl, ini, inno, intercal, io, j, java, java5, javascript, jquery, kixtart, klonec, klonecpp, latex, lb, ldif, lisp, llvm, locobasic, logtalk, lolcode, lotusformulas, lotusscript, lscript, lsl2, lua, m68k, magiksf, make, mapbasic, matlab, mirc, mmix, modula2, modula3, mpasm, mxml, mysql, nagios, netrexx, newlisp, nsis, oberon2, objc, objeck, ocaml, ocaml-brief, octave, oobas, oorexx, oracle11, oracle8, oxygene, oz, parasail, parigp, pascal, pcre, per, perl, perl6, pf, php, php-brief, pic16, pike, pixelbender, pli, plsql, postgresql, povray, powerbuilder, powershell, proftpd, progress, prolog, properties, providex, purebasic, pycon, pys60, python, q, qbasic, rails, rebol, reg, rexx, robots, rpmspec, rsplus, ruby, sas, scala, scheme, scilab, sdlbasic, smalltalk, smarty, spark, sparql, sql, stonescript, systemverilog, tcl, teraterm, text, thinbasic, tsql, typoscript, unicon, upc, urbi, uscript, vala, vb, vbnet, vedit, verilog, vhdl, vim, visualfoxpro, visualprolog, whitespace, whois, winbatch, xbasic, xml, xorg_conf, xpp, yaml, z80, zxbasic
WindowsFeature Remove-SMBv1 #Windows-Feature SMBv1 deinstallieren { Ensure = "Absent" #Alternatively, to ensure the role is installed, set Ensure to "Present" Name = "FS-SMB1" #Use the Name property from Get-WindowsFeature }
Weitere Infos: https://support.microsoft.com/de-ch/help/2696547/how-to-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and-windows