File access and com­mu­ni­ca­tion between devices and computer processes have been regulated by the network protocol SMB (Server Message Block) in Windows systems for decades. Current operating system editions like Windows 10, for example, still support SMBv1 – the first version of this standard. However, this version has received attention in the recent past due to security vul­ner­a­bil­i­ties, which is why it’s best to avoid this outdated protocol edition. Find out in this article how to disable support for certain variants of SMB in Windows 10, and how to re­ac­ti­vate it if needed.

Activate and de­ac­ti­vate SMBv1 in Windows 10 – how it works

In current Windows 10 in­stal­la­tions, SMBv1 is no longer au­to­mat­i­cal­ly installed as standard. But if you activate the protocol manually (or using external software) or have upgraded an older Windows edition, it’s advisable to disable support for the outdated protocol version. You can perform this step via the Control Panel, Pow­er­Shell or the Windows Registry. The extent to which each approach for ac­ti­vat­ing and de­ac­ti­vat­ing the protocol varies can be seen in the following step-by-step guide.

Adjust SMB1 support via the Windows 10 Control Panel

If you want to enable or disable SMB/CFIS support without using Pow­er­Shell in Windows, you can carry out this step via the operating system’s software manager.

Step 1: Open “Programs and Features”

First, open the “Programs and Features” section which allows you to manage installed software and protocols like SMBv1 in Microsoft systems. To do so, open the Start menu (Windows icon) and then Control Panel. There you’ll find the button “Programs and Features”.

Image: Windows 10 Control Panel: “Programs and Features”
In the Control Panel, Windows 10 lists the main setting options for the operating system.

Step 2: Open menu for Windows features

In the left menu, click on “Turn Windows features on or off” to access the menu for managing protocols:

Image: “Programs and Features” menu in Windows 10
If you want to activate or de­ac­ti­vate Windows features and, for example, change the settings for SMB1 in Windows 10, you’ll always need ad­min­is­tra­tor rights.

Step 3: Disable support for SMB 1.0/CFIS file sharing

Look for the entry on SMB Windows 10 support and remove the checkmark from the cor­re­spond­ing box. The three sub-options will also be de­ac­ti­vat­ed; they refer to an SMB client, an SMB server and an automatic removal function. The latter option ensures that SMBv1 is au­to­mat­i­cal­ly de­ac­ti­vat­ed when the old protocol version is not used – which is no longer necessary in this case.

Image: Activating Windows SMB support
Windows 10 lists the com­mu­ni­ca­tion protocol under the new des­ig­na­tion “SMB 1.0” as well as the old name “CIFS”.

Step 4: Confirm changes and restart device

Finally, click “OK” to disable SMB1 in Windows 10. This process will take some time, during which you shouldn’t close the open window. As soon as the process has finished, you’ll receive the prompt to restart the system. You can do so by clicking on “Restart now”:

Image: Windows 10: Restart dialog
Only once the device has restarted are the changes affecting the SMB protocol applied.
Note

If you want to turn on SMBv1 at a later time or in general, you can also follow our guide. Instead of de­s­e­lect­ing the option “Support for SMB 1.0/CFIS file sharing” in the third step, simply place a checkmark in the box. However, ac­ti­vat­ing this setting is only rec­om­mend­ed in ab­solute­ly ex­cep­tion­al cases.

Disable or enable SMB in Windows 10 via Pow­er­Shell

You can also manage protocols like Server Message Block in Windows 10 using Pow­er­Shell – with the right command. Just like adjusting the settings via Control Panel, you’ll need ad­min­is­tra­tor rights since Windows will otherwise deny you access to the necessary options.

Step 1: Start Pow­er­Shell as an ad­min­is­tra­tor

For the first step, open Pow­er­Shell with ad­min­is­tra­tor rights. There are two ways to do this: If it’s available in your Windows 10 in­stal­la­tion, you’ll find the menu item “Windows Pow­er­Shell (ad­min­is­tra­tor)” in the quick-start menu (right-click on the Windows icon). Simply clicking on this option will start the practical con­fig­u­ra­tion framework. Al­ter­na­tive­ly, enter “Pow­er­Shell” in the Windows search bar, select the search result with a right-click and then click on “Run as ad­min­is­tra­tor”:

Image: Windows search: Result for the search term “powershell”
Depending on the con­fig­u­ra­tion of rights, it may be necessary for you to enter your password in order to run Pow­er­Shell as an ad­min­is­tra­tor.

Step 2: Access the current status of SMB1 in Windows 10

After starting Pow­er­Shell, check whether or not your Windows in­stal­la­tion currently supports com­mu­ni­ca­tion via the old protocol version. You can do this by typing the following command and con­firm­ing it with the [Enter] key:

Get-SmbServerConfiguration | Format-List EnableSMB1Protocol

Following a short pro­cess­ing time, you’ll receive one of two possible output values: If Pow­er­Shell displays the value “False” for “EnableSMB1Protocol”, SMBv1 is disabled. If support is active, the value displayed will be “True”.

Image: Windows PowerShell: SMB status check
When SMB is inactive, Windows Pow­er­Shell outputs the value “False” for the requested parameter “EnableSMB1Protocol”.

Step 3: Enable or disable SMBv1

If the outdated SMB version is currently supported by your system, you should de­ac­ti­vate it. The command to do this is shown below:

Set-SmbServerConfiguration -EnableSMB1Protocol 0

Pow­er­Shell will then ask if you really want to perform this action. To confirm, type “Y” and press the [Enter] key:

Image: PowerShell: Deactivating SMBv1
Even when you de­ac­ti­vate SMB in Windows 10 via Pow­er­Shell, you’ll need to restart your device afterward.

Then, restart Windows 10 to apply the system changes.

Note

To activate the outdated protocol version in Pow­er­Shell, add the value “1” to the command “Set-Smb­Server­Con­fig­u­ra­tion -EnableSMB1Protocol”.

De­ac­ti­vate or activate SMB1 in the Windows 10 Registry

The third option for adjusting the support of SMB1 in Windows 10 is accessed via the registry database of the system – or simply the “Registry”. Using the standard editor Regedit, you can modify the entry for the com­mu­ni­ca­tion protocol here. As in the previous two cases, you’ll need ad­min­is­tra­tor rights again.

Step 1: Start Windows 10 Registry as ad­min­is­tra­tor

The easiest way to open the Windows 10 Registry Editor as an ad­min­is­tra­tor is via the Windows search feature. Open the service – for instance, via “Search” in the quick-start menu (right-click on the Windows icon) – and enter the search term “regedit”. Select the search result shown using the right mouse button and then click on “Run as ad­min­is­tra­tor”:

Image: Windows 10 search: result for “regedit”
The Registry Editor is installed in Windows systems as a standard tool for managing Registry.

Step 2: Open registry key

Once you’ve opened the editor, the next step is to access the correct registry key. To do so, enter the following path in the address bar or click through the folder structure until you reach the right location:

Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters
Image: Registry Editor in Windows 10
The ab­bre­vi­a­tion “Lanman” stands for LAN Manager, which is used to manage important network ap­pli­ca­tions and protocols in Windows 10.

Step 3: Change value for “SMB1”

Double click on “SMB1” in the opened key and enter the value “0” to disable SMB1 in Windows 10. Next, confirm the new value with “OK”:

Image: SMB1 entry in the Windows 10 Registry
If the SMB1 entry shown is missing, you can also add it first: “New”-> “DWORD-value (32-Bit)”.

Close the editor and then restart Windows 10 to apply the changes regarding Server Message Block.

Note

To activate SMB1, enter the value “1” in the field shown.

Go to Main Menu