2017年5月15日 星期一

Disable SMBv1 to avoid EternalBlue exploit in Windows 7

Disable SMBv1 server from windows 7:

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters" SMB1 -Type DWORD -Value 0 -Force

Disable SMBv1 client from windows 7:
sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc.exe config mrxsmb10 start= disabled


References: