PDA

View Full Version : How to enable and disable SMBv1, SMBv2, and SMBv3



NewsArchive
03-20-2013, 02:24 AM
Hi Friedrich,

Please look at this MS article:

How to enable and disable SMBv1, SMBv2, and SMBv3:
http://support.microsoft.com/kb/2696547?

As you know it's only possible to turn off oplocks when SMB2 (and SMB3)
has been turned off.

In the article I read the following:
To disable SMBv2 and SMBv3 on the SMB CLIENT, run the following commands:
sc.exe config lanmanworkstation depend= bowser/mrxsmb10/nsi
sc.exe config mrxsmb20 start= disabled
Can this be done with SetupBuilder?

Then there's something new about Windows 8 and Windows Server 2012:
To disable SMBv2 and SMBv3 on the SMB SERVER, run the following cmdlet:
Set-SmbServerConfiguration -EnableSMB2Protocol $false
Can this be done with SetupBuilder?

After SMB2/SMB3 has been turned off, I can disable oplocks with the
registry setting so that TPS files don't get corrupted.

I hope something can be made with SetupBuilder.
--
Best regards,
Jeffrey

NewsArchive
03-20-2013, 02:25 AM
Hi Jeffrey,

> In the article I read the following:
> To disable SMBv2 and SMBv3 on the SMB CLIENT, run the following commands:
> sc.exe config lanmanworkstation depend= bowser/mrxsmb10/nsi
> sc.exe config mrxsmb20 start= disabled
> Can this be done with SetupBuilder?

Yes. Just use the "Run Command Line..." or "Run Program..." script
functions.

> Then there's something new about Windows 8 and Windows Server 2012:
> To disable SMBv2 and SMBv3 on the SMB SERVER, run the following cmdlet:
> Set-SmbServerConfiguration -EnableSMB2Protocol $false
> Can this be done with SetupBuilder?

See above. A "cmdlet" is executed in the PowerShell process. Call
PowerShell.exe to start a Windows PowerShell session and execute your
cmdlet:

http://technet.microsoft.com/en-us/library/hh847736.aspx

Friedrich

NewsArchive
03-20-2013, 02:25 AM
Thanks a lot!

Best regards,
Jeffrey