Configure SMB v1 client driverID: oval:org.secpod.oval:def:87990 | Date: (C)2023-03-10 (M)2023-12-12 |
Class: COMPLIANCE | Family: windows |
Configures the SMB v1 client driver's start type.
To disable client-side processing of the SMBv1 protocol, select the "Enabled" radio button, then select "Disable driver" from the dropdown.
WARNING: DO NOT SELECT THE "DISABLED" RADIO BUTTON UNDER ANY CIRCUMSTANCES!
For Windows 7 and Servers 2008, 2008R2, and 2012, you must also configure the "Configure SMB v1 client (extra setting needed for pre-Win8.1/2012R2)" setting.
To restore default SMBv1 client-side behavior, select "Enabled" and choose the correct default from the dropdown:
* "Manual start" for Windows 7 and Windows Servers 2008, 2008R2, and 2012;
* "Automatic start" for Windows 8.1 and Windows Server 2012R2 and newer.
Changes to this setting require a reboot to take effect.
For more information, see https://support.microsoft.com/kb/2696547
Fix:
(1) GPO: Computer Configuration\Administrative Templates\MS Security Guide\Configure SMB v1 client driver
(2) REG: HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\MrxSmb10!Start
Platform: |
Microsoft Windows 11 |