Saturday, 13 May 2017

Disable and Remove SMB1 via ConfigMgr Compliance Settings

In the wake of the recent WannaCry worm wreaking havoc across the globe, I thought I'd knock up a quick set of Configuration Manager compliance settings and a baseline to easily disable and remove SMB1 from devices within an environment.

Just as I started to gather the information I would need about the various settings, I noticed that Alex Pooley had already documented what I was about to do.

You can find his blog post with his methods here:
https://alexpooleyblog.wordpress.com/2017/03/09/disabling-smb1-via-configmgr-desired-state-configuration-dsc/

There's not much value in me repeating all of the steps in this post, refer to the excellent work that Alex has already done.
However, I've made some minor changes to some of the PowerShell, set names consistently, tested it and exported it as a cab file for easy import into other environments.

Download from the TechNet Gallery here

This baseline will perform the following:
  • Disable SMB1 on Windows 8 & Server 2012 or newer
  • Remove SMB1 on Windows 8.1 & Server 2012 R2 or newer
  • Disable SMB1 Client on Windows 7 & Server 2008 R2
  • Disable SMB1 Server on Windows 7 & Server 2008 R2
Importing the cab file should give you a new folder named Security with 4 CI's within it.



These CI's are mainly using PowerShell scripts to discover and then remediate the various SMB1 configurations on the relevant Operating Systems except for the disabling of SMB1 (Server) for Windows 7/Server 2008(R2) which uses a registry value check and set.

These 4 CI's are wrapped into a Baseline called "Disable SMB1" that you can find in the folder named Security. This baseline then needs targeting at a collection that you would like to disable/remove SMB1 from.

I've run it across my estate, but I do only have 2012 R2 and Windows 10 devices. A few devices are reporting script timeout errors and I still need to dig into those further, but overall it runs fine and successfully disables SMB1.


35 comments:

Vamshi Krishna said...



Hai Author, Very Good informative blog post,
Thanks for Sharing

Dung Maurice said...

Best ikey monitor on the market is lies behind this link

Richard Swayar said...

Australia best tutor is well known academic portal. Here students can get different kind of Online Assignment help services like that

1.Online Assignment Help
2.Instant Assignment Help
3.Assignment Help
4.Help with Assignment
5.my assignment Help

And also access that services at any time and any where.

Riya karakoti said...

Air conditioning maintenance birmingham- onlyrepaircenter has the 30 Years Experience in Air conditioning maintenance service in birmingham. If you are facing the problem in your air conditioning of any company such as Daikin, Mitsubishi, Carrier, Fujitsu, Toshiba, Airedale, Sanyo, Trane and LG then you can contact to us.

Air Conditioning Installation birmingham
Commercial air conditioning repair Birmingham
residential air conditioning repair birmingham
Air Conditioning Maintenance birmingham
window ac repair birmingham

Riya karakoti said...

Best Digital Marketing Training Institutes in Noida - As the virtual marketing field maintains to develop at a fast pace, entrepreneurs are springing with new possibilities.

Best Php Training Institutes in Noida

Best Digital Marketing Training Institutes in Noida

Best Hadoop Training Institutes In Noida

Best Sas Training Institutes in Noida

Best Sap Training Institutes in Noida

Best Linux Training Institutes in Noida

Best Salesforce Training Institutes in Noida

Best Software Testing Training Institutes In Noida

ciit noida said...

CIITN Noida provides Best Big Data Training in Noida & Best Big Data Training Institute in Noida. based on current industry standards that helps attendees to secure placements in their dream jobs at MNCs. CIITN Provides Best Big Data Training in Noida. CIITN is one of the most credible Big Data training institutes in Noida offering hands on practical knowledge and full job assistance with basic as well as advanced level Big Data training courses. At CIITN Big Data training in noida is conducted by subject specialist corporate professionals with 7+ years of experience in managing real-time Big Data projects. CIITN implements a blend of academic learning and practical sessions to give the student optimum exposure that aids in the transformation of naïve students into thorough professionals that are easily recruited within the industry.
CIITN is the best Hadoop training center in Noida with a very high level infrastructure and laboratory facility. The most attractive thing is that candidates can opt multiple Institute.

ciit noida said...

CIITN provides Best Linux training in noida based on current industry standards that helps attendees to secure placements in their dream jobs at MNCs. CIITN Provides Best Linux Training in Noida. CIITN is one of the most credible offering hands on practical knowledge and full job assistance with basic as well as advanced level.

best linux training institute in noida

ciit noida said...

CIITN provides Best Linux training in noida based on current industry standards that helps attendees to secure placements in their dream jobs at MNCs. CIITN Provides Best Linux Training in Noida. CIITN is one of the most credible offering hands on practical knowledge and full job assistance with basic as well as advanced level.

best linux training institute in noida

Riya karakoti said...

Webtrackker Technology is offering "Best Web Design Training Institutes in Noida" for all students & learners at a cost effective rates. Here all students are joining for best grades and for better results.

Best Web Design Training Institutes in Noida

Salesforce Training institute in noida

Hadoop Training Institute in Noida

Digital Marketing Training Institute in Noida

Riya karakoti said...

Webtrackker is one only IT company who will provide you best class training with real time working on marketing from last 4 to 8 Years Experience Employee. We make you like a strong technically sound employee with our best class training.

Best Web Design Training Institutes in Noida

Salesforce Training institute in noida

Hadoop Training Institute in Noida

Digital Marketing Training Institute in Noida

Digital Marketing Training in Noida

Digital marketing course in noida

Sap Training Institute in Noida

Aws Training Institute in Noida

Java Training Institute in Noida

Riya karakoti said...

Nice Post

Best Web Design Training Institutes in Noida

Salesforce Training institute in noida

Hadoop Training Institute in Noida

Digital Marketing Training Institute in Noida

Digital Marketing Training in Noida

Digital marketing course in noida

Sap Training Institute in Noida

Aws Training Institute in Noida

Java Training Institute in Noida

autocad institute said...

AutocAD
Best Autocad training in delhi
AutoCAD Summer Training in Uttam Nager
AutoCAD Summer Training in Delhi

preeti verma said...

MCA colleges in noida
MSC IT colleges in noida
M TECH colleges in noida

ajay. chinna said...


Nice Post I learned a lot From the Post Thanks for sharing, learn the most ON-DEMAND software Training in Best Training Institutions
Instructor-LED Salesforce Online Training
Salesforce Training
Salesforce Training online in India

Ryder Austin said...

Webtracker is one of the best Institute in Noida. In this Institutes we have offered to a student to get more and more information for your subject with both parts like theory and practise.

Contact Us Information

Webtrackker Technology
C - 67, Sector- 63, Noida - 201301 (Delhi-NCR), INDIA

Our Services

Oracle dba training in Noida
Python Training in Noida
Salesforce training in Noida
SAS Training in Noida
IOT Training in Noida


Slim said...

Sorry to say, here are not various equivalent websites like yours. I do not understand if it is an excellent point but nonetheless, I am joyful that you write the articles!

Brunette said...

Congratulations my dear! I am checking your blog for a some several months and I have to say that the degree of your reviews is awesome!

Mature said...

Hello. I am Emma and I have simply read your review. I have to acknowledge that I am pleased. It is extremely fascinating page and everything is mentioned with specifics what creates reading and understanding faster. Good-job!

Busty said...

Hey there! I browse your information from a very long time. I still love doing it because I nevertheless learn something hot and special. I am actually thankful that you upload the posts.

Sussex said...

The Web globe is wide and deep and I'm glad that I discovered your website among a lot of which present matching question. However, your blog been found to be a gold fish in the pool full of average fish.

Tamara said...

Hi! I am Carmen and I really fancy your blogs. I browse it almost once a week when I need moment to get to know new facts and ideas. I really value you and your writings! Good job!

Areni said...

That is an ideal document. I quite appreciate studying it. Well-done! I'm seeking additional material!

Widenia said...

My mate has told me about the internet site a day before. I have looked over the basic content today and I should say that it is very good printed.

Saja said...

Unluckily, there are not numerous matching web sites like yours. I do not know if it is the right aim but however, I'm happy that you publish the articles!

Darimo said...

Good luck my dear! I am studying your blog for a few weeks and I must acknowledge that the degree of your posts is impressive!

Tatani said...

Hi. I am Emma and I have only browse your document. I need to confess that I'm really pleased. It is quite fascinating content and every thing is explained with specifics what creates browsing and knowing quicker. Good-job!

Ulimo said...

Hi there! I study your articles from a long time. I nevertheless like doing it because I nevertheless know something better and new. I'm actually thankful that you post the articles.

Aromi said...

The Websites world is extended and huge and I am simply happy that I discovered your website between thousands which offer matching problem. Nonetheless, your blog turned out to be a silver fish in the pond full of average fish.

Olina said...

It's a great page. I cannot hold out to study certain newer posts released by you. Well done.

Barbara said...

This has been a long date and in the stop of the time I noticed your website. I am just thankful that I conducted it because I have made better my mood! Many thanks so a lot!

Lalandi said...

Hello! I am Carmen and I actually like your blogs. I see it nearly one time a year when I own time to get to know new details and ideas. I really value you and your writings! Good-job!

Tatinko said...

It is a terrific article. I really appreciate researching it. Well-done! I am trying to find additional documents!

Potrio said...

My relative has told me about the internet site a month before. I have study the first document nowadays and I need to mention that it is very ideal created.

Unknown said...

Very nice post here thanks for it .I always like and such a super contents of these post.
DevOps Online Training

johnes mitchell said...

GBWhatsapp Apk
GbWhatsapp
mygbplus
GB Whatsapp Download