Saturday, 13 May 2017

Disable and Remove SMB1 via ConfigMgr Compliance Settings

In the wake of the recent WannaCry worm wreaking havoc across the globe, I thought I'd knock up a quick set of Configuration Manager compliance settings and a baseline to easily disable and remove SMB1 from devices within an environment.

Just as I started to gather the information I would need about the various settings, I noticed that Alex Pooley had already documented what I was about to do.

You can find his blog post with his methods here:
https://alexpooleyblog.wordpress.com/2017/03/09/disabling-smb1-via-configmgr-desired-state-configuration-dsc/

There's not much value in me repeating all of the steps in this post, refer to the excellent work that Alex has already done.
However, I've made some minor changes to some of the PowerShell, set names consistently, tested it and exported it as a cab file for easy import into other environments.

Download from the TechNet Gallery here

This baseline will perform the following:
  • Disable SMB1 on Windows 8 & Server 2012 or newer
  • Remove SMB1 on Windows 8.1 & Server 2012 R2 or newer
  • Disable SMB1 Client on Windows 7 & Server 2008 R2
  • Disable SMB1 Server on Windows 7 & Server 2008 R2
Importing the cab file should give you a new folder named Security with 4 CI's within it.



These CI's are mainly using PowerShell scripts to discover and then remediate the various SMB1 configurations on the relevant Operating Systems except for the disabling of SMB1 (Server) for Windows 7/Server 2008(R2) which uses a registry value check and set.

These 4 CI's are wrapped into a Baseline called "Disable SMB1" that you can find in the folder named Security. This baseline then needs targeting at a collection that you would like to disable/remove SMB1 from.

I've run it across my estate, but I do only have 2012 R2 and Windows 10 devices. A few devices are reporting script timeout errors and I still need to dig into those further, but overall it runs fine and successfully disables SMB1.


22 comments:

Vamshi Krishna said...



Hai Author, Very Good informative blog post,
Thanks for Sharing

Dung Maurice said...

Best ikey monitor on the market is lies behind this link

Richard Swayar said...

Australia best tutor is well known academic portal. Here students can get different kind of Online Assignment help services like that

1.Online Assignment Help
2.Instant Assignment Help
3.Assignment Help
4.Help with Assignment
5.my assignment Help

And also access that services at any time and any where.

Alex Smith said...

McAfee Activate - Follow the steps for uninstalling, downloading, installing and activating McAfee antivirus. Visit us, enter the 25-digit activation code, click submit. mcafee.com/activate | mcafee.com/activate

Alex Smith said...

Login or sign up at office setup and download Microsoft Office. Install and activate the setup on your device. Verify the Office product key office.com/setup

Alex Smith said...

Norton setup - Get started with Norton by downloading the setup and installing it on the device. Enter the unique 25-character alphanumeric product key for activation. Check your subscription norton.com/setup | norton.com/setup | norton.com/setup.

officecom-officeoffice said...

Norton.com/setup is a general respected stamp offering the best of antivirus relationship around the globe. Keeping its structures and sorts, Norton setup gives explicit changes which meet the prominent need of the customers.
http://nor-norton.com/setup/

officecom-officeoffice said...

You may on a freakishly central estimation get the Services in case you are a Service supporter on positive terms with an excellent 'ol bound, account with Office.com/setup.
http://office-comofficeoffice.com/

officecom-officeoffice said...

Office.com/setup Services join sullying discovering, issue clearing, PC alter, Internet login introduction, email account setup, programming foundation, printed setup, printer support, and general PC investigating affiliations.
http://officecom-officeoffice.com

MariaRoss said...

[url=http://norton-comnortonnorton.com]norton.com/setup[/url] to install setup product key, Learn how to download, install, and put into outfill Norton Setup concerning speaking the subject of your
Windows and Mac device.
[url=http://norton-comnortonnorton.com]http://norton-comnortonnorton.com[/url]

MariaRoss said...

norton.com/setup to install setup product key, Learn how to download, install, and put into outfill Norton Setup concerning speaking the subject of your Windows and Mac device.
http://norton-comnortonnorton.com

MariaRoss said...

To Downloading, Installing and activating the Norton product, visit www.norton.com/setup and get Started with Norton Antivirus.
http://nortonwwwnorton.com

MariaRoss said...

Get all Steps for installation and download, activate MS office setup. Enter your Office product key on office.com/setup.
http://office-comofficecom.com

MariaRoss said...

After visiting office.com/setup login to microsoft account to take steps sticking together of covenant of office setup, Any complexity in office.com/setup our accomplished will calm for office install.
http://officecomoffiice.com

James Boond said...

After reading your blog for a while i was totally impressed, i dont have the reason to say your blog is not interested, it is fabulous and i hope when next i read your blog i feel the same.

office.com/setup

mcafee.com/activate

mcafee.com/activate

norton.com/setup

Norton.com/setup said...

Really great article, Glad to read the article. It is very informative for us. Thanks for posting.
Visit@:- McAfee.com/activate|Norton.com/myaccount|Norton.com/setup

Kaylee Smith said...

Create an account and get MS Office setup on your computer. If the subscription has expired, learn how to renew it. Get the complete guide to download, install and activate MS office setup. office.com/setup

Lucia Mandela said...

norton.com/setup - Norton security program can secure either one device or up to ten devices and keep the whole network safe from malware such as worms, spyware, rootkits, etc. For getting Norton Setup, visit norton.com/setup , norton.com/setup .
office.com/setup - MS Office is used by a lot of people on a variety of devices like Android, Mac, PC, laptops, and iOS. This Office setup is specially programmed and adapted to do an array of tasks. Microsoft Office provides a list of helpful and dynamic features to accomplish the majority of tasks. To get this amazing setup for any devices, visit office.com/setup.
McAfee antivirus offers end to end protection from malware, fastest security against viruses on the computer files and folders, useful and accurate anti-spam security, and secures your browsing data on the internet. Visit the website mcafee.com/activate to download, install and activate McAfee setup on your device.

McAfee.com/activate said...

Nowadays the graph of cyber-crime is increasing and to prevent this result antivirus software is needed which can protect your device from Cyber crime and other viruses. McAfee antivirus software is well-known software that provides true Cyber security for its users and you can easily activate it through MacAfee.com/Activate. For more updates to visit us: - http://mcafeeactivateservice.com/mcafee-activate-dell.html or https://mcafeeactivateservices.blogspot.com/2019/09/enter-mcafee-product-key-during.html

Deam jones said...

norton.com/setup the advancement of technology and growing use of the internet, there has been observed a great hike in the number of viruses. These viruses directly attack your norton.com/setup computer systems, resulting in corrupting your important data and stealing your confidential information. Viruses norton.com/setup like Ransomware can also lock your data permanently until you pay some ransom to get the access back.

shalley30 said...


www.norton.com/setup
www.norton.com/setup
www.office.com/setup

my assignment help said...

Matlab Assignment Help
Powerpoint Presentation Services
Programming Assignment Help
Essay Writing Help
My assignment help
پروژه آماده
پروژه آماده آباکوس
پروژه آماده سالیدورک
پروژه آماده متلب