How to Enable or Disable SMBv2 in Windows 10 & 11 (2024)

FAQs

How to Enable or Disable SMBv2 in Windows 10 & 11? ›

Open the Powershell and type in Get-SmbServerConfiguration | Select EnableSMB2Protocol. You should receive a True in response, meaning you can run SMB2 on your computer. If not, you might need to be sure you have the latest build of Windows. SMBv2 should be disabled by default.

Step 1: Open control panel Step 2: Navigate to programs and features. Step 3: Click on "Turn Windows features on or off. Step 4: Disable "(Server Message Block) SMB v1"Step 5 : Click ok.

Is it safe to disable SMB v2/v3 in Windows Server? In some situations, one may desire to disable SMB v2/v3 protocols in order to harden their systems. The immediate question is: Is this safe? As per Microsoft, "...we recommend that you do not disable SMBv2 or SMBv3.

Check SMB version: Verify that the SMB version you enabled is running by running the command "Get-SmbServerConfiguration" in PowerShell. This command will display the SMB version currently configured on your server.

STEP 1 :Access Control Panel. Then, select Programs. STEP 2 : Locate Programs and Features and click Turn Windows features on or off. STEP 3 : Find SMB 1.0/CIFS File Sharing Support in the list and enable all three functions belong to it.

While port 139 and 445 aren't inherently dangerous, there are known issues with exposing these ports to the Internet. You can check if a port is open by using the netstat command.

Is SMB enabled by default in Windows 11? ›

SMB 1.0 isn't installed by default in any edition of Windows 11 or Windows Server 2019 and later. Note: Restarting is essential because it ensures that all settings are applied correctly. If you do not restart, you may not see SMB1 enabled immediately.

To enable SMBv2, you want to confirm your operating system can run it. Most Windows 10 operating systems can. Open the Powershell and type in Get-SmbServerConfiguration | Select EnableSMB2Protocol. You should receive a True in response, meaning you can run SMB2 on your computer.

Type regedit in the "Open" field and click OK. Add a REG_DWORD key with the name of Smb2. Set the value to 0 to disable SMB2, or set it to 1 to re-enable SMB2. Restart the server.

SMBv1: Not installed by default but can be installed as an optional feature. It is recommended to keep it disabled unless there are specific legacy applications or devices that require it. SMBv2 and SMBv3: Both enabled by default.

There are a few ways to create a SMB share: If you have "Simple file sharing" enabled (default), right-click the folder you want to share, choose 'Give access to' > 'Specific people', then select a local account or Everyone (or nothing, if you only want your own account to have access).