Wednesday 23 August 2017

How to Disable SMBv1 and Protect Your Windows PC From Attack

How to Disable SMBv1 and Protect Your Windows PC From Attack

The WannaCry and Petya ransomware epidemics both spread using flaws in the ancient SMBv1 protocol, which Windows still enables by default (for some ridiculous reason). Whether you’re using Windows 10, 8, or 7, you should ensure SMBv1 is disabled on your PC.

What Is SMBv1, and Why Is It Enabled By Default?

SMBv1 is an old version of the Server Message Block protocol Windows uses for file sharing on a local network. It’s been replaced by SMBv2 and SMBv3. You can leave versions 2 and 3 enabled—they’re secure.

The older SMBv1 protocol is only enabled because there are some older applications that haven’t been updated to use SMBv2 or SMBv3. Microsoft maintains a list of applications that still require SMBv1 here.

If you’re not using any of these applications—and you probably aren’t—you should disable SMBv1 on your Windows PC to help protect it from any future attacks on the vulnerable SMBv1 protocol. Even Microsoft recommends disabling this protocol unless you need it.

How to Disable SMBv1 on Windows 10 or 8

Microsoft will disable SMBv1 by default beginning with Windows 10’s Fall Creators Update. Sadly, it took a huge ransomware epidemic to push Microsoft to make this change, but better late than never, right?

In the meantime, SMBv1 is easy to disable on Windows 10 or 8. Head to Control Panel > Programs > Turn Windows features on or off. You can also just open the Start menu, type “Features” into the search box, and click the “Turn Windows features on or off” shortcut.

How to Disable SMBv1 and Protect Your Windows PC From Attack

Scroll through the list and locate the “SMB 1.0/CIFS File Sharing Support” option. Uncheck it to disable this feature and click “OK”.

You’ll be prompted to restart your PC after making this change.

How to Disable SMBv1 and Protect Your Windows PC From Attack

How to Disable SMBv1 on Windows 7 by Editing the Registry

On Windows 7, you’ll have to edit the Windows registry to disable the SMBv1 protocol.

Standard warning: Registry Editor is a powerful tool and misusing it can render your system unstable or even inoperable. This is a pretty simple hack and as long as you stick to the instructions, you shouldn’t have any problems. 

To get started, open the Registry Editor by hitting Start and typing “regedit.” Press Enter to open Registry Editor and give it permission to make changes to your PC.

In the Registry Editor, use the left sidebar to navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters

Next, you’re going to create a new value inside the Parameters subkey. Right-click the Parameters key  and choose New > DWORD (32-bit) Value.

Name the new value SMB1 .

The DWORD will be created with a value of “0”, and that’s perfect. “0” means SMBv1 is disabled. You don’t have to edit the value after creating it.

How to Disable SMBv1 and Protect Your Windows PC From Attack


You can now close the registry editor. You will also need to restart your PC before the changes take effect. If you ever want to undo your change, return here and delete the SMB1 value.

More Information About Disabling SMBv1

The above tricks are ideal for disabling SMBv1 on a single PC, but not across an entire network. Consult Microsoft’s official documentation for more information about other scenarios. For example, Microsoft’s documentation recommends rolling out the above registry change using Group Policy if you want to disable SMB1 on a network of Windows 7 machines.

0 comments:

Post a Comment

Related Posts Plugin for WordPress, Blogger...

Labels

404 AdBlock Add-on Airtel GPRS Trick Airtel SMS Trick Alexa Amazon Amazon Kindle Amazon Prime Android Android 8 Android Oreo antivirus Apple Apple Mac ASCII Audacity Audio Authotkey Backup Balance Transfer in Vodafone Battery Bing Blogger Blogging Bookmarklet Browser Camera Chromebook clock Cloud colors command lines Computer Computer Tricks configuration Contact Creative Commons Credit Card CSS devolop DIY Doodle DOS Download Dropbox E-Mail eBook Email Email Attachment Embed Encryption English Error Evernote Eyes Facebook Facebook Tricks Feedburner Flipkart Font Foursquare Free Internet Free sms trick in Vodafone G Mail Gadget Game Getty Images GIF Gists Github Google Google AdSense Google Analytics Google Apps Google Chrome Google Contacts Google Currents Google DNS Google Docs Google Drive Google Earth Google Font Google Forms Google Images Google Map Google Photos Google Play Store Google Plus Google Print Google Reader Google Script Google Sheets Google Spreadsheet Google Translate GPRS Setting GPS Hacking Health App HelloFax Hindi Hoodie HTML Icons idea Image Editing Images IMEI Indian Railways Infographics Instagram Internet Internet Explorer Internet Tricks iOS iPad iPhone IRCTC iTunes iTV JavaScript JioCinema JioTV Junglee Kindle Language Translation Laptop Laptop. TV Life Time FREE GPRS Life-Style Link Linkedln Linux logo Make Money Online Microdoft Powerpoint Microdoft Word Microsoft Office Microsoft Outlook Mobile Mosaic Music Name Networking nexus Notepad OCR Online Shopping Open DNS OS Outlook Password PDF Petya Phillips Hue Lights Photogtraphy Pixel Play Station Podcasts Pokemon Pokemon Go Polls Print Productivity Proxy Server Pushbullet QR Code Ransomware Reddit Reliance Hack GPRS Reliance Jio RGB Ringtone Router RSS Safe Mode Samsung Galaxy S Scrabble Screen Capture Screen Sharing Screencast Secrets Security Send free sms from PC SEO Sierra Skype Slideshare SMBv1 SMS Snapchat Snapdeal Social Media Solution Sound Device Speech Recognition Sql Steam Sync Synology NAS Tata Docomo GPRS trick Teleprompter Torrent Trick Tricks TV Twitter UltraISO Unicode Unknown Extension Unlimited 2GB Unlimited 3GB Unlimited GPRS USB USB Security Key Video Editing virtual desktop Virus attack VLC Vodafone 110% working trick for GPRS Vodafone 3g Vodafone GPRS VPN wallpapers WannaCry Web Design Web Domain Website Wget Whatsapp WiFi Wikipedia Windows Windows 10 Windows 10 S Windows KN Windows Tricks windows updates Winows N Wolfarm Alpha WordPress XBox YouTube Zip
Twitter Delicious Facebook Digg Stumbleupon Favorites More