Intune policy to block the network sharing specifically SMB ports

Question

Hi all, kindly let me know if there were any Intune policy available to block the network drive sharing from local system access, specifically SMB port blocking.

Answer 1

Solution in Win 11/Win 10 all versions

If you're looking for a more custom solution, you can deploy a PowerShell Script via Intune to disable or block SMB ports.

Firstly Go to Windows-Powershell Scripts-then Add these scripts

1. Disable SMBv1, SMBv2, and SMBv3 protocols (Optional)

Set-SmbServerConfiguration -EnableSMB1Protocol $false -Force

Set-SmbServerConfiguration -EnableSMB2Protocol $false -Force

2 . Block SMB port (445)in Windows Firewall

New-NetFirewallRule -DisplayName "Block SMB Port 445" -Direction Inbound -Protocol TCP -LocalPort 445 -Action Block