Understand if SMBv1 if is disable, get-smbserverconfiguration show EnableSMB1Protocol=True

[SaiTech]

Hi,
I would like to understand if the SMBv1 is disable after I run PS-command "Remove-WindowsFeature FS-SMB1"

If I run this command Get-WindowsFeature FS-SMB1:
PS C:\Windows\system32> Get-WindowsFeature FS-SMB1

Display Name Name Install State
------------ ---- -------------
[ ] SMB 1.0/CIFS File Sharing Support FS-SMB1 Available
I can see that the FS-SMB1 feature is removed:

*********************************************************************

If I run this command I can see that the SMB1Protocol State is Disabled:
PS C:\Windows\system32> Get-WindowsOptionalFeature -Online -FeatureName smb1protocol


FeatureName : SMB1Protocol
DisplayName : SMB 1.0/CIFS File Sharing Support
Description : Support for the SMB 1.0/CIFS file sharing protocol, and the Computer Browser protocol.
RestartRequired : Possible
State : Disabled
CustomProperties :
ServerComponent\Description : Support for the SMB 1.0/CIFS file sharing protocol, and the Computer Browser protocol.
ServerComponent\DisplayName : SMB 1.0/CIFS File Sharing Support
ServerComponent\Id : 487
ServerComponent\Type : Feature
ServerComponent\UniqueName : FS-SMB1
ServerComponent\Deploys\Update\Name : SMB1Protocol
*********************************************************************


If I run this command it looks like the smb1protocol is disable:
PS C:\Windows\system32> $smb1 = Get-WindowsOptionalFeature -Online -FeatureName smb1protocol
echo $smb1.State
Disabled
*********************************************************************


If I run the get-smbserverconfiguration I see that the EnableSMB1Protocol is true. Does this say that the EnableSMB1Protocol is enable?:
EnableSMB1Protocol : True

At last I run this command (Set-SmbServerConfiguration -EnableSMB1Protocol $false) and it looks like I disable the EnableSMB1Protocol
PS C:\Windows\system32> Get-SmbServerConfiguration | Select EnableSMB1Protocol
EnableSMB1Protocol
------------------
True
PS C:\Windows\system32> Set-SmbServerConfiguration -EnableSMB1Protocol $false
PS C:\Windows\system32> Get-SmbServerConfiguration | Select EnableSMB1Protocol

EnableSMB1Protocol
------------------
False
*********************************************************************

So do I have to run "Set-SmbServerConfiguration -EnableSMB1Protocol $false" after the command "Remove-WindowsFeature FS-SMB1"?:


Ref:

https://support.microsoft.com/en-us...-disable-smbv1-smbv2-and-smbv3-in-windows-and


/SaiTech

Continue reading...