Saturday, 13 May 2017

Disable and Remove SMB1 via ConfigMgr Compliance Settings

In the wake of the recent WannaCry worm wreaking havoc across the globe, I thought I'd knock up a quick set of Configuration Manager compliance settings and a baseline to easily disable and remove SMB1 from devices within an environment.

Just as I started to gather the information I would need about the various settings, I noticed that Alex Pooley had already documented what I was about to do.

You can find his blog post with his methods here:
https://alexpooleyblog.wordpress.com/2017/03/09/disabling-smb1-via-configmgr-desired-state-configuration-dsc/

There's not much value in me repeating all of the steps in this post, refer to the excellent work that Alex has already done.
However, I've made some minor changes to some of the PowerShell, set names consistently, tested it and exported it as a cab file for easy import into other environments.

Download from the TechNet Gallery here

This baseline will perform the following:
  • Disable SMB1 on Windows 8 & Server 2012 or newer
  • Remove SMB1 on Windows 8.1 & Server 2012 R2 or newer
  • Disable SMB1 Client on Windows 7 & Server 2008 R2
  • Disable SMB1 Server on Windows 7 & Server 2008 R2
Importing the cab file should give you a new folder named Security with 4 CI's within it.



These CI's are mainly using PowerShell scripts to discover and then remediate the various SMB1 configurations on the relevant Operating Systems except for the disabling of SMB1 (Server) for Windows 7/Server 2008(R2) which uses a registry value check and set.

These 4 CI's are wrapped into a Baseline called "Disable SMB1" that you can find in the folder named Security. This baseline then needs targeting at a collection that you would like to disable/remove SMB1 from.

I've run it across my estate, but I do only have 2012 R2 and Windows 10 devices. A few devices are reporting script timeout errors and I still need to dig into those further, but overall it runs fine and successfully disables SMB1.


90 comments:

Unknown said...



Hai Author, Very Good informative blog post,
Thanks for Sharing

Oliver Maurice said...
This comment has been removed by the author.
Richard Swayar said...

Australia best tutor is well known academic portal. Here students can get different kind of Online Assignment help services like that

1.Online Assignment Help
2.Instant Assignment Help
3.Assignment Help
4.Help with Assignment
5.my assignment Help

And also access that services at any time and any where.

Alex Smith said...

McAfee Activate - Follow the steps for uninstalling, downloading, installing and activating McAfee antivirus. Visit us, enter the 25-digit activation code, click submit. mcafee.com/activate | mcafee.com/activate

officecom-officeoffice said...

Norton.com/setup is a general respected stamp offering the best of antivirus relationship around the globe. Keeping its structures and sorts, Norton setup gives explicit changes which meet the prominent need of the customers.
http://nor-norton.com/setup/

officecom-officeoffice said...

Office.com/setup Services join sullying discovering, issue clearing, PC alter, Internet login introduction, email account setup, programming foundation, printed setup, printer support, and general PC investigating affiliations.
http://officecom-officeoffice.com

MariaRoss said...

[url=http://norton-comnortonnorton.com]norton.com/setup[/url] to install setup product key, Learn how to download, install, and put into outfill Norton Setup concerning speaking the subject of your
Windows and Mac device.
[url=http://norton-comnortonnorton.com]http://norton-comnortonnorton.com[/url]

MariaRoss said...

norton.com/setup to install setup product key, Learn how to download, install, and put into outfill Norton Setup concerning speaking the subject of your Windows and Mac device.
http://norton-comnortonnorton.com

MariaRoss said...

To Downloading, Installing and activating the Norton product, visit www.norton.com/setup and get Started with Norton Antivirus.
http://nortonwwwnorton.com

MariaRoss said...

Get all Steps for installation and download, activate MS office setup. Enter your Office product key on office.com/setup.
http://office-comofficecom.com

MariaRoss said...

After visiting office.com/setup login to microsoft account to take steps sticking together of covenant of office setup, Any complexity in office.com/setup our accomplished will calm for office install.
http://officecomoffiice.com

malina smith said...

Really great article, Glad to read the article. It is very informative for us. Thanks for posting.
Visit@:- McAfee.com/activate|Norton.com/myaccount|Norton.com/setup

Kaylee Smith said...

Create an account and get MS Office setup on your computer. If the subscription has expired, learn how to renew it. Get the complete guide to download, install and activate MS office setup. office.com/setup

McAfee.com/activate said...

Nowadays the graph of cyber-crime is increasing and to prevent this result antivirus software is needed which can protect your device from Cyber crime and other viruses. McAfee antivirus software is well-known software that provides true Cyber security for its users and you can easily activate it through MacAfee.com/Activate. For more updates to visit us: - http://mcafeeactivateservice.com/mcafee-activate-dell.html or https://mcafeeactivateservices.blogspot.com/2019/09/enter-mcafee-product-key-during.html

Deam jones said...

norton.com/setup the advancement of technology and growing use of the internet, there has been observed a great hike in the number of viruses. These viruses directly attack your norton.com/setup computer systems, resulting in corrupting your important data and stealing your confidential information. Viruses norton.com/setup like Ransomware can also lock your data permanently until you pay some ransom to get the access back.

shalley30 said...


www.norton.com/setup
www.norton.com/setup
www.office.com/setup

my assignment help said...
This comment has been removed by the author.
dhanuvarma said...
This comment has been removed by the author.
Denise A said...

Some students believe that outline writing how to stop bullying essay is a waste of their precious time, but actually, they are wrong. A proper outline saves time and organizes ideas perfectly well. In case of an essay about bullying, the best type of outline is an alphanumeric one.

Alex Smith said...

Before you set up McAfee Antivirus protection on your device, you first need to make sure that you don’t have an older version of McAfee on your device. mcafee.com/activate | mcafee.com/activate | mcafee.com/activate

Anonymous said...

Gradually, with the new digital dominating world the options have increased of installing any program to the device; Norton.com/setup is an innovative and productive way to download, activate and complete the installation of Norton antivirus.

Anonymous said...

Open www.norton.com/setup or norton.com/setup. Use your Email home and Password for sign-in and Get Started page and further. norton.com, norton activate, install norton, reinstall norton, norton.com/setup, norton.com/activate Technical Support Help will appear, Click Download Norton setup.

i-nortonnorton said...

If you face any trouble at www.norton.com/setup in the course of redeeming Product key, down load and installing norton setup, Please call us toll-free USA/CANADA: +1-855-619-5888
Australia: +61-800-941-031
UK: +44-800-041-8972

Roman Davis said...

It is interesting to read your blog post and I am going to share it with my friends for increasing information about configuration.Assignment writing services

Shanthi Cabs said...

Nice blog, it’s so knowledgeable, informative, and good looking site. I appreciate your hard work. Good job. Thank you for this wonderful sharing with us. Keep Sharing.
Tours and Travels in Madurai | Best tour operators in Madurai
Best travel agency in Madurai | Best Travels in Madurai



mathewanderson202 said...

This article was really helpful. The tip to clarify the topic was good for me to read, I liked your ideas, keep continue.
norton.com/setup

Career Programs Excellence said...

Such a very useful article. Very interesting to read this article.I would like to thank you for the efforts you had made for writing this awesome article.
Business Analytics Course | Business Analytics Training | Business Analytics Course In Hyderabad

Selectmytutor said...

very informative blog. Helps to gain knowledge about new concepts and techniques! Thanks for posting information in this blog!

Online Tutors

Nisha Verma said...

Courses which guarantee a job

Course with job guarantee

Courses that guarantee jobs

it training with job guarantee

100 job guarantee

job guarantee courses

job guarantee courses

Sammer mark said...

Thank you for such a wonderful article. It helped me a lot to resolve my printer offline issues and I can easily set it up to overcome the problem. I have also found that 123helpline.com also provides very useful contents in easy language and if someone still unable to resolve their problem may prefer that site too.
Fix HP Envy 7855 Printer Offline Problem
How to Fix Epson Printer Error-e01

MS Dynamics said...

Valuable post useful for everyone. Keep on sharing.
Online Training
software training institute
online classes

Anonymous said...

Outstanding I like this!!!!!!!!!! Hello guys, I want to tell you that this is an awesome blog and which you have written in this blog, each and every word is also great. Nice dear!! Thanks to sharing with us! Thanks a lot, dear!!!!!!!!!
India VPS Hosing

Anonymous said...

it's a reseal blog posting for everybody, we can fully believe in this article. and if your moto collects information then this is a great article.
Germany VPS Server Hosting

Prasad said...

The great thing about this post is quality information. I always like to read amazingly useful and quality content. Your article is amazing, thank you for sharing this article.
tata cliq offers
mi offers
swiggy offers
zomato coupons

Unknown said...

Thanks for Sharing This Article.It is very so much valuable content. I hope these Commenting lists will help to my website
blockchain online training
best blockchain online training
top blockchain online training

sammer mark said...

Thanks for the post.
Get steps for Setup Hp Smart Tank Plus 651 Wireless All in one
Steps to Reset and Configure D-Link Wireless Router

Myntra Coupons and Offers said...

Thanks for sharing this article. For more save huge money while Online Shopping offers, coupons.you can visit
Very detailed and informative!!
Myntra Offers
Myntra Coupons
Firstcry Offers
Firstcry Coupons
Apple iPhone Mobile Offers
Apple iPhone Mobile Price list
Nokia Mobile Phone Offers
Nokia Mobile Phone Price list
Telegram Channels
Telegram Shopping Channels
WhatsApp Group Links
WhatsApp Shopping Group links

Very detailed and informative!!
Keep sharing...

sammer mark said...

Welcome. I realize this is fairly off-theme, yet I was contemplating whether you knew where I could get a manual human test module for my remark structure? I'm utilizing a similar blog stage like yours, and I'm experiencing issues discovering one? You're the best.
HP Printer not printing
Why my Laptop Battery is Dying Quickly

BTree Systems, Software (IT) Training Institute said...

Btreesystems Specializes in Offering Real-time Experience IT training on AWS, ..etc.. No.1 Software (IT) Training Institute in India aws training in chennai
Python training in Chennai
data science training in chennai
hadoop training in chennai
machine learning training chennai

OGEN Infosystem (P) Limited said...

Amazing Blog, thank you so much for sharing with us. Visit Ogen Infosystem for best Website Designing Company and SEO Services in affordable price.
Web Designing Company in Delhi

Poojarao said...

visit here
iso certification in delhi
iso certification in noida
iso certification in gurgaon
iso certification in faridabad

Eva Wilson said...

Hello there! I am new in this blog and really cool this post.











_____________________________________________
Online Thesis Help

adiversetech said...

Thanks for sharing valuable information.
Mulesoft Training in Hyderabad

buy damaged cars said...
This comment has been removed by the author.
kati martin said...

Ik wil je bedanken voor de inspanningen die je hebt geleverd bij het schrijven van deze blog. Bellen google

naina robert said...

Ik ben erg onder de indruk van het lezen van je blog. Blijf deze waardevolle blogs delen. bellen Instagram

downey jim said...

Positieve webpagina-bron, waar heb je de informatie over dit bericht gevonden? Bedankt voor het delen. Bellen paypal Nummer

ashleyleio123 said...

Ik vond dit een informatieve blog en ook erg nuttig en deskundig. Bellen Outlook

un known said...

Thanks for Sharing This Article.It is very so much valuable content. I hope these Commenting lists will help to my website
devops online training
best devops online training
top devops online training

Aurora Smith said...

Bedankt voor je fantastische post! Ik geniet van het lezen van je bericht, je bent toevallig een geweldige auteur. Als ik vrij ben, lees dan je blog. Youtube bellen

Aurora Smith said...

Bedankt voor je fantastische post! Ik geniet van het lezen van je bericht, je bent toevallig een geweldige auteur. Als ik vrij ben, lees dan je blog. Youtube bellen

paul wayne said...

Heel erg bedankt voor het delen van deze waardevolle informatie met ons. Bellen Hotmail

arshiya said...

Really good information, well written article. Thanks for sharing an article.
common seo mistakes
scope of ai
angular js plugins
advantages of rpa
angularjs interview questions

Aurora Smith said...

Bedankt voor je fantastische post! Ik geniet van het lezen van je bericht, je bent toevallig een geweldige auteur. Als ik vrij ben, lees dan je blog. Youtube bellen

Instagram bellen said...

Ik ben erg onder de indruk van het lezen van je blog. Blijf deze waardevolle blogs delen Instagram bellen

Agoda Promo Code Malaysia said...

I enjoyed over read your blog post. Your blog have nice information, I got good ideas from this amazing blog. I am always searching like this type blog post. I hope I will see again.

DEVID WARNER said...

123 com setup - Alle Einstellungen für den HP Drucker, Installation der Treibersoftware und Einrichtung des HP Wireless unter 123.hp.com.

BtreeSystem Training said...

iot training in chennai - IoT Training in Chennai - IOT is one of the technology which has a lot of scope at the very same time very less number of skilled empolyees in this technology which means this particular technology will give a huge success rate. Join the Best IOT Training Institute in Chennai now.

Devops training Institute in Chennai - Devops a combination of Development and operations has an better career .Jobs opportunities are there from startup company to big mnc. Start to learn the devops technology soon and secure your job now.

blue prism training in Chennai - If you choose to learn the blue prism or automation tool you are supposed to have the programming language. start to learn the blue prism training from the Best Blue prism training Institute in Chennai.

uipath training in Chennai - ui path technology is one of the fastest developing field which has lot of job opportunities such as software developer, Programmer and lot more. Join the Best Uipath training Institute in Chennai.

microsoft azure training in chennai -Microsoft azure technology is growing and soon it will be competitive aws. So students start to learn microsoft azure now will be well - paid in future. Start to learn microsoft azure training in Chennai.

Chennai IT Training Center

Online Front said...

Thanks to you for providing such a great information to us, hope and waiting for your new update soon. Good Job!

website development packages
SMM service
web development packages
1000 free youtube subscribers
Digital Marketing Services in delhi

Devi said...

Really excellent and fascinating post. I was looking for this set of information and enjoyed reading this blog.
technical skills for software tester
rpa in banking industry
what programming language should i learn for data science
use of php in web development
digital marketing interview questions and answers for freshers

Vietnam Airline said...

Đặt mua vé tại Aivivu, tham khảo

kinh nghiệm mua vé máy bay đi Mỹ giá rẻ

cách săn vé máy bay giá rẻ tết 2021

giá vé máy bay eva đi canada

đường bay từ Việt Nam sang Pháp

vé máy bay đi Anh quốc

đại lý vé máy bay giá rẻ

combo khách sạn đà nẵng

mua combo vinpearl nha trang

John said...

very informative blog. Helps to gain knowledge about new concepts and techniques! Thanks for posting information in this blog! سامی بیگی

اندی

سندی

BtreeSystem Training said...

iot training in chennai - Internet of things commonly known as IoT seems to be the next revolution because it will be the future way of business, and consumer interact. IoT has an enormous amount of job opportunities in the future, join the Best IOT Training Institute in Chennai now.

Devops training Institute in Chennai - As a fresher in DevOps you need to learn AWS, Python, GIT, My SQL. Get trained from the Best DevOps Training Institute in Chennai now.

blue prism training in Chennai - Blue prism and Uipath are the Best Robotic Process Automation tool among these people go for Blue prism based on its functionality and demand in the market.

uipath training in Chennai - UI path has a very good future. Uipath is an RPA tool that enables to design automation process visually through diagrams. enroll yourself at the Best Uipath Training Institue in Chennai now.

microsoft azure training in chennai -Microsoft Azure has an ability to use any programming language, framework, or even a tool which also makes it easy to learn to join the Best Microsoft Azure Training Institute in Chennai now.

Chennai IT Training Center

Housethat said...

Book Now and Get Exclusive Offer Now.
✅ "NOW OR NEVER"
✅ BOOK NOW & SAVE UPTO 15LAC* (Offer Valid Till 31 Dec)
✅ The Most Appreciated & Luxury Project Till Now
✅ Ultra Luxurious 4 BHK & Penthouse Apartments at a Reasonable Price.
�� 10: 90 Payment Plan.
�� Wooden Texture.
�� Free Car Parking.
For More Detail:- Book Your Flat in Noida

Angel charls said...

nice information of this blog.for more information Facebook Telefoonnummer

Haley Brown said...

Thanks for sharing this to us more information click here=======================
HP Contact Opnemen

Haley Brown said...

The further irony is that members of the George Bush's Securities and Exchange Commission were pushing for regulation as they attempted to protect investors and the public from potential fallout.
Epson Printer Contact

BtreeSystem Training said...

Linkedin
Facebook
Youtube
Tweet

Car Auction Software said...

This was something I was looking for, really helpful, and great work is done. Thank you so much for sharing such valuable information.
Car Auction Software |

Best CRM for Small Businesses said...

It’s really a cool and helpful piece of information. I am glad that you shared useful information with us. Please keep us up to date like this. Thanks for sharing.
Best CRM for Small Businesses |

Addons said...

Thank you For you Article
Drilling consultants
Ball valve
Organic Chemistry tutor
school management erp

Addons said...

Web Development Company in usa
Mobile app development in usa
Android app development company in usa
ios app development in usa
ionic framework development in usa

Addons said...

ecommerce service company in usa
shopify website development in usa
prestashop development in usa
magento development in usa
oscommerce development in usa

Addons said...

banking it services in usa
healthcare it solution in usa
retail it services in usa
oil and gas it services in usa
logistics it services in usa

Addons said...

media entertainment it solutions in usa
emerging technology company in usa
artificial intelligence company in usa
blockchain technology company in usa
data science and analytics services in usa

pawan said...

Voice call service provider in India, can be used by any company or individual to promote or advertise a product or brand, or services. We also provide the Email Marketing Service to engage subscribers, nurture leads, send beautiful, responsive emails and track results.

Addons said...

seo consulting in usa
social media promotion in usa
search engine marketing in usa
ppc services and management in usa
email marketing in usa

vé máy bay đi Canada said...

Đặt vé máy bay tại Aivivu, tham khảo

ve may bay di my gia re

vé máy bay pacific airlines đi quy nhơn

giá vé máy bay thanh hóa hồ chí minh

đặt vé máy bay sài gòn hà nội

bán vé máy bay từ mỹ về việt nam

thuê xe ra sân bay nội bài

combo nha trang 4 ngày 3 đêm

Kunal Singh said...

Their convenience depends on their mood.Hot and Sexy Call Girls in Pune as a result of they don’t work half-heartedly and don’t wish to waste time only for creating some bucks.Hotel Sex Service in Pune They additionally would like pleasure and for that, they’re able to do something a person needs.Call Girls in Agra you’ll take them anyplace in Hi Profile Escorts in Dehradun like on Dinner, parties, disks, pubs or family functions, and that they would be with you simply sort of a supporter.Hi Profile Escorts in Dehradun You don’t feel embarrassed about them going out, Hot and Sexy Call Girls in Gurgaon in fact, they’re the real company a gentleman wants.

Cracks said...

ReiBoot Crack is a free boot repair tool for iOS devices. With the app, you can put your iPhone / iPad or iPod Touch in recovery mode with one click, if you can’t do it on your iOS device or through the iTunes app.
Duolingo APK Mod
Bandicam Crack
Antares Autotune Pro Crack

Cracks said...

Topaz Video Enhance AI Pro kegyen Crack is a video enlarger that allows users to increase the size of their videos up to 8K ultra high definition.
Presonus Studio One Pro kegyen Crack
Daemon Tools Pro kegyen Crack
AutoDesk Fusion Pro kegyen Crack

Cracks said...

DaVinci Resolve Crack is easy to learn for anyone familiar with the editing process. It is a powerful program with so many functions that it is difficult to mention them all.
Mixed in Key Crack
iZotope Ozone 9 Advanced Crack Win
Z3TA 2 Free

Cracks said...

ReiBoot Crack is a free boot repair tool for iOS devices. With the app, you can put your iPhone / iPad or iPod Touch in recovery mode with one click, if you can’t do it on your iOS device or through the iTunes app.
Duolingo APK Mod
Bandicam Crack
Antares Autotune Pro Crack

Cracks said...

Revo Uninstaller Pro Serial Key crack is a practical and useful application that helps you remove and uninstall unwanted programs and traces from your system.
Adobe illustrator Pro Serial Key crack
Cytomic the Glue VST Crack Free

kati martin said...

Ik vond dit een informatieve blog en ook erg nuttig en deskundig. Bellen google

naina robert said...

Positieve webpagina-bron, waar heb je de informatie over dit bericht gevonden? Bedankt voor het delen. telefoon bellen Instagram

ashleyleio123 said...

Zeer informatieve blog. bedankt voor het delen met ons.Bellen Outlook

bomarz said...


خرید و فروش ارز دیجیتال ،صرافی آنلاین بوم ارز
http://bomarz.com
صرافی بوم ارز

Janny kayle said...

Visit our website and Troubleshoot the most commonly occuring errors of Microsoft office by the easiest steps. Install, and activate your Office setup on your computer and other devices.
office.com/setup
www.office.com/setup
office.com/setup
www.office.com/setup

Brisk Logic said...

nice