Saturday, 13 May 2017

Disable and Remove SMB1 via ConfigMgr Compliance Settings

In the wake of the recent WannaCry worm wreaking havoc across the globe, I thought I'd knock up a quick set of Configuration Manager compliance settings and a baseline to easily disable and remove SMB1 from devices within an environment.

Just as I started to gather the information I would need about the various settings, I noticed that Alex Pooley had already documented what I was about to do.

You can find his blog post with his methods here:
https://alexpooleyblog.wordpress.com/2017/03/09/disabling-smb1-via-configmgr-desired-state-configuration-dsc/

There's not much value in me repeating all of the steps in this post, refer to the excellent work that Alex has already done.
However, I've made some minor changes to some of the PowerShell, set names consistently, tested it and exported it as a cab file for easy import into other environments.

Download from the TechNet Gallery here

This baseline will perform the following:
  • Disable SMB1 on Windows 8 & Server 2012 or newer
  • Remove SMB1 on Windows 8.1 & Server 2012 R2 or newer
  • Disable SMB1 Client on Windows 7 & Server 2008 R2
  • Disable SMB1 Server on Windows 7 & Server 2008 R2
Importing the cab file should give you a new folder named Security with 4 CI's within it.



These CI's are mainly using PowerShell scripts to discover and then remediate the various SMB1 configurations on the relevant Operating Systems except for the disabling of SMB1 (Server) for Windows 7/Server 2008(R2) which uses a registry value check and set.

These 4 CI's are wrapped into a Baseline called "Disable SMB1" that you can find in the folder named Security. This baseline then needs targeting at a collection that you would like to disable/remove SMB1 from.

I've run it across my estate, but I do only have 2012 R2 and Windows 10 devices. A few devices are reporting script timeout errors and I still need to dig into those further, but overall it runs fine and successfully disables SMB1.


48 comments:

Unknown said...



Hai Author, Very Good informative blog post,
Thanks for Sharing

Oliver Maurice said...
This comment has been removed by the author.
Richard Swayar said...

Australia best tutor is well known academic portal. Here students can get different kind of Online Assignment help services like that

1.Online Assignment Help
2.Instant Assignment Help
3.Assignment Help
4.Help with Assignment
5.my assignment Help

And also access that services at any time and any where.

Alex Smith said...

McAfee Activate - Follow the steps for uninstalling, downloading, installing and activating McAfee antivirus. Visit us, enter the 25-digit activation code, click submit. mcafee.com/activate | mcafee.com/activate

Alex Smith said...

Login or sign up at office setup and download Microsoft Office. Install and activate the setup on your device. Verify the Office product key office.com/setup

Alex Smith said...

Norton setup - Get started with Norton by downloading the setup and installing it on the device. Enter the unique 25-character alphanumeric product key for activation. Check your subscription norton.com/setup | norton.com/setup | norton.com/setup.

officecom-officeoffice said...

Norton.com/setup is a general respected stamp offering the best of antivirus relationship around the globe. Keeping its structures and sorts, Norton setup gives explicit changes which meet the prominent need of the customers.
http://nor-norton.com/setup/

officecom-officeoffice said...

You may on a freakishly central estimation get the Services in case you are a Service supporter on positive terms with an excellent 'ol bound, account with Office.com/setup.
http://office-comofficeoffice.com/

officecom-officeoffice said...

Office.com/setup Services join sullying discovering, issue clearing, PC alter, Internet login introduction, email account setup, programming foundation, printed setup, printer support, and general PC investigating affiliations.
http://officecom-officeoffice.com

MariaRoss said...

[url=http://norton-comnortonnorton.com]norton.com/setup[/url] to install setup product key, Learn how to download, install, and put into outfill Norton Setup concerning speaking the subject of your
Windows and Mac device.
[url=http://norton-comnortonnorton.com]http://norton-comnortonnorton.com[/url]

MariaRoss said...

norton.com/setup to install setup product key, Learn how to download, install, and put into outfill Norton Setup concerning speaking the subject of your Windows and Mac device.
http://norton-comnortonnorton.com

MariaRoss said...

To Downloading, Installing and activating the Norton product, visit www.norton.com/setup and get Started with Norton Antivirus.
http://nortonwwwnorton.com

MariaRoss said...

Get all Steps for installation and download, activate MS office setup. Enter your Office product key on office.com/setup.
http://office-comofficecom.com

MariaRoss said...

After visiting office.com/setup login to microsoft account to take steps sticking together of covenant of office setup, Any complexity in office.com/setup our accomplished will calm for office install.
http://officecomoffiice.com

James Boond said...

After reading your blog for a while i was totally impressed, i dont have the reason to say your blog is not interested, it is fabulous and i hope when next i read your blog i feel the same.

office.com/setup

mcafee.com/activate

mcafee.com/activate

norton.com/setup

malina smith said...

Really great article, Glad to read the article. It is very informative for us. Thanks for posting.
Visit@:- McAfee.com/activate|Norton.com/myaccount|Norton.com/setup

Kaylee Smith said...

Create an account and get MS Office setup on your computer. If the subscription has expired, learn how to renew it. Get the complete guide to download, install and activate MS office setup. office.com/setup

Lucia Mandela said...

norton.com/setup - Norton security program can secure either one device or up to ten devices and keep the whole network safe from malware such as worms, spyware, rootkits, etc. For getting Norton Setup, visit norton.com/setup , norton.com/setup .
office.com/setup - MS Office is used by a lot of people on a variety of devices like Android, Mac, PC, laptops, and iOS. This Office setup is specially programmed and adapted to do an array of tasks. Microsoft Office provides a list of helpful and dynamic features to accomplish the majority of tasks. To get this amazing setup for any devices, visit office.com/setup.
McAfee antivirus offers end to end protection from malware, fastest security against viruses on the computer files and folders, useful and accurate anti-spam security, and secures your browsing data on the internet. Visit the website mcafee.com/activate to download, install and activate McAfee setup on your device.

McAfee.com/activate said...

Nowadays the graph of cyber-crime is increasing and to prevent this result antivirus software is needed which can protect your device from Cyber crime and other viruses. McAfee antivirus software is well-known software that provides true Cyber security for its users and you can easily activate it through MacAfee.com/Activate. For more updates to visit us: - http://mcafeeactivateservice.com/mcafee-activate-dell.html or https://mcafeeactivateservices.blogspot.com/2019/09/enter-mcafee-product-key-during.html

Deam jones said...

norton.com/setup the advancement of technology and growing use of the internet, there has been observed a great hike in the number of viruses. These viruses directly attack your norton.com/setup computer systems, resulting in corrupting your important data and stealing your confidential information. Viruses norton.com/setup like Ransomware can also lock your data permanently until you pay some ransom to get the access back.

shalley30 said...


www.norton.com/setup
www.norton.com/setup
www.office.com/setup

my assignment help said...
This comment has been removed by the author.
dhanuvarma said...
This comment has been removed by the author.
Denise A said...

Some students believe that outline writing how to stop bullying essay is a waste of their precious time, but actually, they are wrong. A proper outline saves time and organizes ideas perfectly well. In case of an essay about bullying, the best type of outline is an alphanumeric one.

Alex Smith said...

Thank you so much for sharing such superb information's with us. Download the Microsoft Office setup on your Windows or Mac computer. Make sure that the Office product key is already copied for the activation procedure. office.com/setup | office.com/setup

Alex Smith said...

Before you set up McAfee Antivirus protection on your device, you first need to make sure that you don’t have an older version of McAfee on your device. mcafee.com/activate | mcafee.com/activate | mcafee.com/activate

monu said...

Thank you for excellent article.Great information for new guy like antimalware service executable

Unknown said...

Gradually, with the new digital dominating world the options have increased of installing any program to the device; Norton.com/setup is an innovative and productive way to download, activate and complete the installation of Norton antivirus.

Unknown said...

Open www.norton.com/setup or norton.com/setup. Use your Email home and Password for sign-in and Get Started page and further. norton.com, norton activate, install norton, reinstall norton, norton.com/setup, norton.com/activate Technical Support Help will appear, Click Download Norton setup.

i-nortonnorton said...

If you face any trouble at www.norton.com/setup in the course of redeeming Product key, down load and installing norton setup, Please call us toll-free USA/CANADA: +1-855-619-5888
Australia: +61-800-941-031
UK: +44-800-041-8972

mrk kiani said...

Selling WordPress site templates with 90% discount on similar site stores
Project site ready for MATLAB: The Metalbwists site began its activity in Iran in 2013 and is active in the field of Matlab programming language. It has participated in more than 2,000 successful programming projects and has served more than 5,000 students in MATLAB learning. Continue with the پروژه شبيه سازي با متلب various sections of the site. Main Page Electrical engineering projects • matlabi 2 • Matlab tutorial 4 انجام پروژه متلب • Programming Tutorial in MATLAB 1 • MATLAB programming tutorial 1 • Simulink Matlab Training on Power Power

Roman Davis said...

It is interesting to read your blog post and I am going to share it with my friends for increasing information about configuration.Assignment writing services

Shanthi Cabs said...

Nice blog, it’s so knowledgeable, informative, and good looking site. I appreciate your hard work. Good job. Thank you for this wonderful sharing with us. Keep Sharing.
Tours and Travels in Madurai | Best tour operators in Madurai
Best travel agency in Madurai | Best Travels in Madurai



Mark William said...

eset internet security can be installed quickly on each device if the user follows the correct procedure. You can follow the instructions below to install the setup on your devices such as Windows PC, Mac, or mobile device.

Mark William said...

Trend Micro Internet Security subscription is the single way to download the software on multiple devices through www.trendmicro.com/downloadme . Trend micro has become a superior antivirus program over many antiviruses due to its advanced protection features. trend micro download process becomes easy when you purchase the subscription.

mathewanderson202 said...

This article was really helpful. The tip to clarify the topic was good for me to read, I liked your ideas, keep continue.
norton.com/setup

augustwalker said...

after to refreshing my Windows 10 to its latest form, my associated HP printer is currently unfit to take any of my printing direction. I scanned Google for this, and found this is because of the driver issue. Additionally, I come to realize that, I can download HP printer's driver and related programming from www hp com 123 setup. Be that as it may, I don't have the foggiest idea how to download driver from this webpage. If you don't mind would someone be able to please help me viewing this as I needed to proceed with my printing fill in at the earliest opportunity.

Sammer mark said...

Thank you for sharing the such a good informative information. If the driver has two-way communication, you may be warned not to switch to the printer, but you have not found anything in the print cartridge. Fortunately, these warnings often tell you what the problem is and recommend tactics to solve it. If everything else is not working, turn off the printer, wait a few minutes, and then restart the printer and software.
Fix HP Envy 4500 Printer Offline Window 10

Manage office said...

while installing Office 365 sometimes it won't install on your device because of some issues to tackle we have written this blog on Office 365 won’t install to help you out.

Jason Assistant said...

If one is using an HP Laptop with a touch screen then sometimes people wants to turn off the touch screen of their laptop to work properly on it. If you want to know more about how to turn off the touch screen on HP laptop.

Denial11 said...

What an amazing article is this. thanks for this, I really appreciate you. If you are interested in neo and gas wallets, please visit our websites to get full information about the official neo wallet.

sammer mark said...

Thank you for the post. Now a day their are many expert technician to resolve the HP Envy 5540 Printer Offline Issues, but is that which technician can get you 100% satisfaction to resolved your printer problem. The most famous and expert technicians we have which will be resolve your problem in very few and simple steps in front of you by which you will satisfied.

Business Analytics Course in Hyderabad said...

Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article.
Business Analytics Course | Business Analytics Training | Business Analytics Course In Hyderabad

Nisha Verma said...

Best Job Courses after graduation course 100% Jobs CIITN

Job Guaranteed Professional courses after graduation Degree with job placement | CIITN

Courses after Bcom | Software engineer courses | 100% Jobs |CIITN

Guaranteed jobs near me.? | 100% Placements | CIITN

Software developer courses | 100% Placements | CIIT NOIDA

Software development courses training |100% Jobs| CIIT NOIDA

Best Job Courses after graduation course | 100% Jobs |CIITN

Job oriented short term courses after graduation | 100% Pleacements | CIITN

short term job oriented courses after graduation in India

6 month industrial training Institute |100% Placements|CIITN

Selectmytutor said...

very informative blog. Helps to gain knowledge about new concepts and techniques! Thanks for posting information in this blog!

Online Tutors

Nisha Verma said...

Courses which guarantee a job

Course with job guarantee

Courses that guarantee jobs

it training with job guarantee

100 job guarantee

job guarantee courses

job guarantee courses

Sammer mark said...

Thank you for such a wonderful article. It helped me a lot to resolve my printer offline issues and I can easily set it up to overcome the problem. I have also found that 123helpline.com also provides very useful contents in easy language and if someone still unable to resolve their problem may prefer that site too.
Fix HP Envy 7855 Printer Offline Problem
How to Fix Epson Printer Error-e01

Python said...

Valuable post useful for everyone. Keep on sharing.
Online Training
software training institute
online classes