Saturday 13 May 2017

Disable and Remove SMB1 via ConfigMgr Compliance Settings

In the wake of the recent WannaCry worm wreaking havoc across the globe, I thought I'd knock up a quick set of Configuration Manager compliance settings and a baseline to easily disable and remove SMB1 from devices within an environment.

Just as I started to gather the information I would need about the various settings, I noticed that Alex Pooley had already documented what I was about to do.

You can find his blog post with his methods here:
https://alexpooleyblog.wordpress.com/2017/03/09/disabling-smb1-via-configmgr-desired-state-configuration-dsc/

There's not much value in me repeating all of the steps in this post, refer to the excellent work that Alex has already done.
However, I've made some minor changes to some of the PowerShell, set names consistently, tested it and exported it as a cab file for easy import into other environments.

Download from the TechNet Gallery here

This baseline will perform the following:
  • Disable SMB1 on Windows 8 & Server 2012 or newer
  • Remove SMB1 on Windows 8.1 & Server 2012 R2 or newer
  • Disable SMB1 Client on Windows 7 & Server 2008 R2
  • Disable SMB1 Server on Windows 7 & Server 2008 R2
Importing the cab file should give you a new folder named Security with 4 CI's within it.



These CI's are mainly using PowerShell scripts to discover and then remediate the various SMB1 configurations on the relevant Operating Systems except for the disabling of SMB1 (Server) for Windows 7/Server 2008(R2) which uses a registry value check and set.

These 4 CI's are wrapped into a Baseline called "Disable SMB1" that you can find in the folder named Security. This baseline then needs targeting at a collection that you would like to disable/remove SMB1 from.

I've run it across my estate, but I do only have 2012 R2 and Windows 10 devices. A few devices are reporting script timeout errors and I still need to dig into those further, but overall it runs fine and successfully disables SMB1.


45 comments:

Unknown said...



Hai Author, Very Good informative blog post,
Thanks for Sharing

Oliver Maurice said...
This comment has been removed by the author.
Richard Swayar said...

Australia best tutor is well known academic portal. Here students can get different kind of Online Assignment help services like that

1.Online Assignment Help
2.Instant Assignment Help
3.Assignment Help
4.Help with Assignment
5.my assignment Help

And also access that services at any time and any where.

MariaRoss said...

[url=http://norton-comnortonnorton.com]norton.com/setup[/url] to install setup product key, Learn how to download, install, and put into outfill Norton Setup concerning speaking the subject of your
Windows and Mac device.
[url=http://norton-comnortonnorton.com]http://norton-comnortonnorton.com[/url]

Kaylee Smith said...

Create an account and get MS Office setup on your computer. If the subscription has expired, learn how to renew it. Get the complete guide to download, install and activate MS office setup. office.com/setup

Deam jones said...

norton.com/setup the advancement of technology and growing use of the internet, there has been observed a great hike in the number of viruses. These viruses directly attack your norton.com/setup computer systems, resulting in corrupting your important data and stealing your confidential information. Viruses norton.com/setup like Ransomware can also lock your data permanently until you pay some ransom to get the access back.

shalley30 said...


www.norton.com/setup
www.norton.com/setup
www.office.com/setup

my assignment help said...
This comment has been removed by the author.
dhanuvarma said...
This comment has been removed by the author.
Anonymous said...

Some students believe that outline writing how to stop bullying essay is a waste of their precious time, but actually, they are wrong. A proper outline saves time and organizes ideas perfectly well. In case of an essay about bullying, the best type of outline is an alphanumeric one.

Roman Davis said...

It is interesting to read your blog post and I am going to share it with my friends for increasing information about configuration.Assignment writing services

Career Programs Excellence said...

Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article.
Business Analytics Course | Business Analytics Training | Business Analytics Course In Hyderabad

Selectmytutor said...

very informative blog. Helps to gain knowledge about new concepts and techniques! Thanks for posting information in this blog!

Online Tutors

Nisha Verma said...

Courses which guarantee a job

Course with job guarantee

Courses that guarantee jobs

it training with job guarantee

100 job guarantee

job guarantee courses

job guarantee courses

Sammer mark said...

Thank you for such a wonderful article. It helped me a lot to resolve my printer offline issues and I can easily set it up to overcome the problem. I have also found that 123helpline.com also provides very useful contents in easy language and if someone still unable to resolve their problem may prefer that site too.
Fix HP Envy 7855 Printer Offline Problem
How to Fix Epson Printer Error-e01

MS Dynamics said...

Valuable post useful for everyone. Keep on sharing.
Online Training
software training institute
online classes

Anonymous said...

Outstanding I like this!!!!!!!!!! Hello guys, I want to tell you that this is an awesome blog and which you have written in this blog, each and every word is also great. Nice dear!! Thanks to sharing with us! Thanks a lot, dear!!!!!!!!!
India VPS Hosing

Anonymous said...

it's a reseal blog posting for everybody, we can fully believe in this article. and if your moto collects information then this is a great article.
Germany VPS Server Hosting

sammer mark said...

Thanks for the post.
Get steps for Setup Hp Smart Tank Plus 651 Wireless All in one
Steps to Reset and Configure D-Link Wireless Router

sammer mark said...

Welcome. I realize this is fairly off-theme, yet I was contemplating whether you knew where I could get a manual human test module for my remark structure? I'm utilizing a similar blog stage like yours, and I'm experiencing issues discovering one? You're the best.
HP Printer not printing
Why my Laptop Battery is Dying Quickly

OGEN Infosystem (P) Limited said...

Amazing Blog, thank you so much for sharing with us. Visit Ogen Infosystem for best Website Designing Company and SEO Services in affordable price.
Web Designing Company in Delhi

Eva Wilson said...

Hello there! I am new in this blog and really cool this post.











_____________________________________________
Online Thesis Help

adiversetech said...

Thanks for sharing valuable information.
Mulesoft Training in Hyderabad

buy damaged cars said...
This comment has been removed by the author.
naina robert said...

Ik ben erg onder de indruk van het lezen van je blog. Blijf deze waardevolle blogs delen. bellen Instagram

Agoda Promo Code Malaysia said...

I enjoyed over read your blog post. Your blog have nice information, I got good ideas from this amazing blog. I am always searching like this type blog post. I hope I will see again.

DEVID WARNER said...

123 com setup - Alle Einstellungen für den HP Drucker, Installation der Treibersoftware und Einrichtung des HP Wireless unter 123.hp.com.

Online Front said...

Thanks to you for providing such a great information to us, hope and waiting for your new update soon. Good Job!

website development packages
SMM service
web development packages
1000 free youtube subscribers
Digital Marketing Services in delhi

Vietnam Airline said...

Đặt mua vé tại Aivivu, tham khảo

kinh nghiệm mua vé máy bay đi Mỹ giá rẻ

cách săn vé máy bay giá rẻ tết 2021

giá vé máy bay eva đi canada

đường bay từ Việt Nam sang Pháp

vé máy bay đi Anh quốc

đại lý vé máy bay giá rẻ

combo khách sạn đà nẵng

mua combo vinpearl nha trang

John said...

very informative blog. Helps to gain knowledge about new concepts and techniques! Thanks for posting information in this blog! سامی بیگی

اندی

سندی

Housethat said...

Book Now and Get Exclusive Offer Now.
✅ "NOW OR NEVER"
✅ BOOK NOW & SAVE UPTO 15LAC* (Offer Valid Till 31 Dec)
✅ The Most Appreciated & Luxury Project Till Now
✅ Ultra Luxurious 4 BHK & Penthouse Apartments at a Reasonable Price.
�� 10: 90 Payment Plan.
�� Wooden Texture.
�� Free Car Parking.
For More Detail:- Book Your Flat in Noida

Angel charls said...

nice information of this blog.for more information Facebook Telefoonnummer

Haley Brown said...

Thanks for sharing this to us more information click here=======================
HP Contact Opnemen

Haley Brown said...

The further irony is that members of the George Bush's Securities and Exchange Commission were pushing for regulation as they attempted to protect investors and the public from potential fallout.
Epson Printer Contact

Addons said...

Web Development Company in usa
Mobile app development in usa
Android app development company in usa
ios app development in usa
ionic framework development in usa

pawan said...

Voice call service provider in India, can be used by any company or individual to promote or advertise a product or brand, or services. We also provide the Email Marketing Service to engage subscribers, nurture leads, send beautiful, responsive emails and track results.

vé máy bay đi Canada said...

Đặt vé máy bay tại Aivivu, tham khảo

ve may bay di my gia re

vé máy bay pacific airlines đi quy nhơn

giá vé máy bay thanh hóa hồ chí minh

đặt vé máy bay sài gòn hà nội

bán vé máy bay từ mỹ về việt nam

thuê xe ra sân bay nội bài

combo nha trang 4 ngày 3 đêm

Kunal Singh said...

Their convenience depends on their mood.Hot and Sexy Call Girls in Pune as a result of they don’t work half-heartedly and don’t wish to waste time only for creating some bucks.Hotel Sex Service in Pune They additionally would like pleasure and for that, they’re able to do something a person needs.Call Girls in Agra you’ll take them anyplace in Hi Profile Escorts in Dehradun like on Dinner, parties, disks, pubs or family functions, and that they would be with you simply sort of a supporter.Hi Profile Escorts in Dehradun You don’t feel embarrassed about them going out, Hot and Sexy Call Girls in Gurgaon in fact, they’re the real company a gentleman wants.

Cracks said...

ReiBoot Crack is a free boot repair tool for iOS devices. With the app, you can put your iPhone / iPad or iPod Touch in recovery mode with one click, if you can’t do it on your iOS device or through the iTunes app.
Duolingo APK Mod
Bandicam Crack
Antares Autotune Pro Crack

Cracks said...

Topaz Video Enhance AI Pro kegyen Crack is a video enlarger that allows users to increase the size of their videos up to 8K ultra high definition.
Presonus Studio One Pro kegyen Crack
Daemon Tools Pro kegyen Crack
AutoDesk Fusion Pro kegyen Crack

Cracks said...

DaVinci Resolve Crack is easy to learn for anyone familiar with the editing process. It is a powerful program with so many functions that it is difficult to mention them all.
Mixed in Key Crack
iZotope Ozone 9 Advanced Crack Win
Z3TA 2 Free

Cracks said...

ReiBoot Crack is a free boot repair tool for iOS devices. With the app, you can put your iPhone / iPad or iPod Touch in recovery mode with one click, if you can’t do it on your iOS device or through the iTunes app.
Duolingo APK Mod
Bandicam Crack
Antares Autotune Pro Crack

Cracks said...

Revo Uninstaller Pro Serial Key crack is a practical and useful application that helps you remove and uninstall unwanted programs and traces from your system.
Adobe illustrator Pro Serial Key crack
Cytomic the Glue VST Crack Free

bomarz said...


خرید و فروش ارز دیجیتال ،صرافی آنلاین بوم ارز
http://bomarz.com
صرافی بوم ارز

Brisk Logic said...

nice