SMBv1 Disable on SBS2011

https://acbrownit.com/category/information-security/

Server instructions should cover it. Be aware that removing SMBv1 from systems will prevent them from communicating with Windows XP (I hope you don't actually have that) or NASes that use SMBv1 (a far too common occurrence). Systems with Server 2008/Vista/7 and later will use SMBv2, 2012 and later will use SMBv3.

Thanks but its doesn't work, this command would work for Server 2008, 2012 etc... SBS2011 is different

https://support.microsoft.com/en-us/help/2696547/how-to-enable-and-disable-smbv1,-smbv2,-and-smbv3-in-windows-vista,-windows-server-2008,-windows-7,-windows-server-2008-r2,-windows-8,-and-windows-server-2012 should cover you. Can't uninstall on 2008, but you can disable it.

Also bear in mind it could break communication with a multifunction printer on the network.

Thanks Adam, i have already read that article, nothing applies to SBS2011, none of the Powershell commands work and the registry entries it mentions do not exist

Hi Natty, but if Wannacry gets in via email, it will spread through the network to any computers open with the SMBv1 protocol

but if Wannacry gets in via email, it will spread through the network to any computers open with the SMBv1 protocol

Incorrect. Systems that are patched won't be able to get infected by this method. However, the problem does lie with the actual encryption portion from the system that does get infected via phishing emails.

Have you patched the other systems, and I'm guessing your issue is solely at the server?

Thanks Adam, i have already read that article, nothing applies to SBS2011, none of the Powershell commands work and the registry entries it mentions do not exist

Just as a note, SBS2011 is built on Server 2008R2, so instructions for disabling SMB1 on that OS will work on SBS2011