SMB on SCCM Server

Question

Hello everyone

I have both SMB v1 and v2 enabled on my SCCM server:

SMB v1 is deprecated and is considered a vulnerability

Will there be a problem if I just disabled SMB v1 using the following command? :

Set-SmbServerConfiguration -EnableSMB1Protocol $false

Thanks

Answer 1

Hi, @Anthony Vand

Thank you for posting in Microsoft Q&A forum.

Disabling SMBv1 on your SCCM server should not cause any issues as long as you have verified that there are no clients or applications that require SMBv1. SMBv1 is deprecated and considered a security vulnerability, so it is generally recommended to disable it if possible. You can disable SMBv1 on your SCCM server using the command you provided:

Set-SmbServerConfiguration -EnableSMB1Protocol $false

After running this command, you can verify that SMBv1 is disabled by running the following command:

Get-SmbServerConfiguration | Select EnableSMB1Protocol

If the output is "False", then SMBv1 is disabled on your SCCM server.

---

If the answer is the right solution, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Add comment".

Answer 2

It depends on your environment. Older OS like Windows XP / 2003 or earlier only support SMBv1. If you disable it and you still have those OS, your SCCM Server as well as your old clients will not be able to communicate through SMB

https://learn.microsoft.com/en-us/windows-server/storage/file-server/troubleshoot/detect-enable-and-disable-smbv1-v2-v3?tabs=server