Professional Documents
Culture Documents
How To Enable - Disable SMBv1, SMBv2, and SMBv3 in Windows and Windows
How To Enable - Disable SMBv1, SMBv2, and SMBv3 in Windows and Windows
How To Enable - Disable SMBv1, SMBv2, and SMBv3 in Windows and Windows
in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
Document Center (/help) Security Advisories (/help/product/35474.htm) Security Deployment Guide (/help/f...
Impacted functionality
How to enable and disable SMB proto...
How to enable/disable SMBv1, SMBv2, and Disable SMBv1 Server with Group Poli...
SMBv3 in Windows and Windows Server Disable SMBv1 Client with Group Policy
This article describes how to enable and disable Server Message Block (SMB) version
1 (SMBv1), SMB version 2 (SMBv2), and SMB version 3 (SMBv3) on the SMB client and
server components.
Impacted functionality
Note: We do not recommend that you disable SMBv2 or SMBv3. Disable SMBv2 or
SMBv3 only as a temporary troubleshooting measure. Do not leave SMBv2 or SMBv3
disabled.
Disabling SMBv2
In Windows 7 and Windows Server 2008 R2, disabling SMBv2 deactivates the
following functionality:
https://www.alibabacloud.com/help/faq-detail/57499.htm 1/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
Document Center (/help) Improved energy ef ciency - clients that have open les to a server can sleep
Impacted functionality
In Windows 8, Windows 8.1, Windows 10, Windows Server 2012, and Windows Server How to enable and disable SMB proto...
2016, disabling SMBv3 deactivates the following functionality (and also the SMBv2
functionality that’s described in the previous list): Disable SMBv1 Server with Group Poli...
Transparent Failover - clients reconnect without interruption to cluster nodes Disable SMBv1 Client with Group Policy
during maintenance or failover
How to gracefully remove SMB v1 in ...
Scale Out – concurrent access to shared data on all le cluster nodes
Multichannel - aggregation of network bandwidth and fault tolerance if multiple
paths are available between client and server
SMB Direct – adds RDMA networking support for very high performance, with low
latency and low CPU utilization
Encryption – Provides end-to-end encryption and protects from eavesdropping on
untrustworthy networks
Directory Leasing - Improves application response times in branch of ces through
caching
Performance Optimizations - optimizations for small random read/write I/O
Note: When you enable or disable SMBv2 in Windows 8 or in Windows Server 2012,
SMBv3 is also enabled or disabled. This behavior occurs because these protocols
share the same stack.
You do not have to restart the computer after you run the Set-SMBServerCon guration
cmdlet.
To get the current status of the SMB server protocol con guration, run the
following cmdlet:
https://www.alibabacloud.com/help/faq-detail/57499.htm 2/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
To disable SMBv2 and SMBv3 on the SMB server, run the following cmdlets: Disable SMBv1 Server with Group Poli...
To enable SMBv2 and SMBv3 on the SMB server, run the following cmdlet:
PowerShell methods
To disable SMBv2 and SMBv3 on the SMB server, run the following cmdlets:
Note: This following content contains information about how to modify the registry.
Make sure that you back up the registry before you modify it. Make sure that you know
how to restore the registry if a problem occurs. For more information about how to
back up, restore, and modify the registry, see How to back up and restore the registry
in Windows (https://support.microsoft.com/en-us/help/322756).
To enable or disable SMBv1 on the SMB server, con gure the following registry
key:
Registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parame
ters
REG_DWORD: 0 = Disabled
REG_DWORD: 1 = Enabled
Default: 1 = Enabled (No registry key is created)
To enable or disable SMBv2 on the SMB server, con gure the following registry
key:
Registry subkey:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parame
ters
REG_DWORD: 1 = Enabled
Default: 1 = Enabled (No registry key is created)
Note: You must restart the computer after you make these changes
https://www.alibabacloud.com/help/faq-detail/57499.htm 4/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
Note: When you enable or disable SMBv2 in Windows 8 or in Windows Server 2012, Disable SMBv1 Client with Group Policy
SMBv3 is also enabled or disabled. This behavior occurs because these protocols
share the same stack. How to gracefully remove SMB v1 in ...
To disable SMBv2 and SMBv3 on the SMB client, run the following command:
To enable SMBv2 and SMBv3 on the SMB client, run the following command:
Note:
You must restart the computer after you make these changes.
Registry entry: SMB1 REG_DWORD: 0 = Disabled How to enable, and disable SMB prot...
To con gure this using Group Policy: Disable SMBv1 Server with Group Poli...
1. Open the Group Policy Management Console. Right-click the Group Policy object Disable SMBv1 Client with Group Policy
(GPO) that must contain the new preference item, and then click Edit.
How to gracefully remove SMB v1 in ...
2. In the console tree under Computer Con guration, expand the Preferences
folder, and then expand the Windows Settings folder.
3. Right-click the Registry node, point to New, and select Registry Item.
Action: Create
Hive: HKEY_LOCAL_MACHINE
Value data: 0
https://www.alibabacloud.com/help/faq-detail/57499.htm 6/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
5. This disables the SMBv1 Server components. This Group Policy must be applied
to all necessary workstations, servers, and domain controllers in the domain.
Note: Be careful when making these changes on domain controllers where legacy
Windows XP or older Linux and 3rd party systems (that do not support SMBv2 or
SMBv3) require access to SYSVOL or other le shares where SMB v1 is being
disabled.
This updates and replaces the default values in the following 2 items in the registry
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\mrxsmb10
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation
Action: Update
Hive: HKEY_LOCAL_MACHINE
Value data: 4
https://www.alibabacloud.com/help/faq-detail/57499.htm 8/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
Then remove the dependency on the MRxSMB10 that was just disabled
Action: Replace
Hive: HKEY_LOCAL_MACHINE
Value data:
Bowser
MRxSmb20
NSI
https://www.alibabacloud.com/help/faq-detail/57499.htm 9/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
Note: When using Group Policy Management Console, there is no need to use
quotation marks or commas. Just type the each entry on individual lines as shown
above.
Restart Requirement
After the policy has applied and the registry settings are in place, you have to restart
the system before SMB v1 is disabled.
Summary
If all the settings are in the same Group Policy Object (GPO), Group Policy
Management shows the settings below.
https://www.alibabacloud.com/help/faq-detail/57499.htm 10/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
Once these are con gured, allow the policy to replicate and update. As necessary for
testing, run gpupdate /force from a CMD.EXE prompt and then review the target
machines to make sure that the registry settings are getting applied correctly. Make
sure SMB v2 and SMB v3 is functioning for all other systems in the environment.
https://www.alibabacloud.com/help/faq-detail/57499.htm 11/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
https://www.alibabacloud.com/help/faq-detail/57499.htm 12/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
https://www.alibabacloud.com/help/faq-detail/57499.htm 13/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
About Alibaba Cloud Free Trial China Gateway Contact Sales Documentation
A comprehensive
(https://www.alibabacloud.com/about)
(https://www.alibabacloud.com/campaign/free-
(https://www.alibabacloud.com/china-
(https://www.alibabacloud.com/contact-
Center
suite of global
Pricing Models trial) gateway) sales) (https://www.alibabacloud.com/help)
cloud computing
(https://www.alibabacloud.com/pricing)
Refer a Friend ICP License Support Submit a Ticket Alibaba Cloud MVP services to power
Products (https://www.alibabacloud.com/campaign/referral)
(https://www.alibabacloud.com/icp)
(https://account.alibabacloud.com/login/login.htm? your business
(https://www.alibabacloud.com/mvp)
(https://www.alibabacloud.com/product)
Starter Package Getting Started lang=&oauth_callback=http%3A//workorder-
Security &
Customers (https://www.alibabacloud.com/starter-
(https://www.alibabacloud.com/getting-
intl.console.aliyun.com/console.htm%3Flang%3D%23)
Compliance
(https://www.facebook.com/alibabacloud/)
(//www.linkedin.com/company/alibaba-
(//www.twitter.com/alibaba_cloud)
(https://www.alibabacloud.com/customers)
packages/general) started) After-Sales Support (https://www.alibabacloud.com/trust-
cloud-
Partners Web Hosting Blog (https://www.alibabacloud.com/support/after-
center)
(//plus.google.com/113352360570257060531
computing-
(https://www.alibabacloud.com/partner)
(https://www.alibabacloud.com/product/hosting)
(https://www.alibabacloud.com/blog)
sales) Press Room
Startups Af liate Program Marketplace Report Abuse company)
(https://www.alibabacloud.com/press-
(https://www.alibabacloud.com/startup)
(https://www.alibabacloud.com/af
(https://marketplace.alibabacloud.com/)
liate) (https://www.alibabacloud.com/report)
room)
https://www.alibabacloud.com/help/faq-detail/57499.htm 14/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
2018)
How to gracefully remove SMB v1 in ...
CDN (https://www.alibabacloud.com/product/cdn)
eCommerce (https://www.alibabacloud.com/solutions/e-commerce)
Security (https://www.alibabacloud.com/solutions/security)
Industries (https://topic.alibabacloud.com/c/industries_2)
Developers (https://topic.alibabacloud.com/c/developer_1)
https://www.alibabacloud.com/help/faq-detail/57499.htm 15/16
4/9/2019 How to enable/disable SMBv1, SMBv2, and SMBv3 in Windows and Windows Server - Security Deployment Guide| Alibaba Cloud Documentation Center
Tutorials (https://topic.alibabacloud.com/c/tutorials_4)
Document Center (/help)
PHP Tutorials (https://topic.alibabacloud.com/c/php-tutorials_4_86_1) Impacted functionality
M (https://topic.alibabacloud.com/zqpop/m) N (https://topic.alibabacloud.com/zqpop/n)
O (https://topic.alibabacloud.com/zqpop/o) P (https://topic.alibabacloud.com/zqpop/p)
Q (https://topic.alibabacloud.com/zqpop/q) R (https://topic.alibabacloud.com/zqpop/r)
S (https://topic.alibabacloud.com/zqpop/s) T (https://topic.alibabacloud.com/zqpop/t)
U (https://topic.alibabacloud.com/zqpop/u) V (https://topic.alibabacloud.com/zqpop/v)
W (https://topic.alibabacloud.com/zqpop/w) X (https://topic.alibabacloud.com/zqpop/x)
Y (https://topic.alibabacloud.com/zqpop/y) Z (https://topic.alibabacloud.com/zqpop/z)
0-9 (https://topic.alibabacloud.com/zqpop/0-9)
https://www.alibabacloud.com/help/faq-detail/57499.htm 16/16