SMBv1 deaktivieren/deinstallieren

Empfohlen wird das Feature zu deaktivieren und zu deinstallieren. (Sicherheitstechnisch)

PowerShell

Deaktivieren

Set-SmbServerConfiguration -EnableSMB1Protocol $false

Windows Server 2008 R2 und älter / Windows 7 und älter

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force

Deinstallieren

Remove-WindowsFeature -Name FS-SMB1

DSC

Deaktivieren

Configuration Disable-SMBv1 #Registry-Value setzen
{
   Registry 'SMB1'{
    Ensure = 'Present'
    Key = HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters'
    ValueName = 'SMB1'
    ValueType = 'Dword'
    ValueData = '0'
    }
}

Deinstallieren

WindowsFeature Remove-SMBv1 #Windows-Feature SMBv1 deinstallieren
{
    Ensure = "Absent" #Alternatively, to ensure the role is installed, set Ensure to "Present"
    Name = "FS-SMB1" #Use the Name property from Get-WindowsFeature  
}

Weitere Infos: https://support.microsoft.com/de-ch/help/2696547/how-to-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and-windows