W16 – Turn off SMBv1

SMBv1 is an old file-sharing protocol used by past ransomware outbreaks. Modern Windows does not need it.

1. Check in an admin PowerShell:

   Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

   SCREENSHOT PLACEHOLDER – no image yet: img/guides/smbv1-01.png
   SMB1Protocol feature state
2. If State is Enabled, turn it off:

   Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol -NoRestart

   SCREENSHOT PLACEHOLDER – no image yet: img/guides/smbv1-02.png
   Disable command output
3. Restart the PC and run the check again. If an old scanner or NAS stops working, ask us before turning SMBv1 back on.

Describes settings detected at the time of the check. Not an audit, not a certification, not legal advice. Back to all fix guides.