10 11 both only have smb1 ONLY a windows 11 from the wall mart store a brand new laptoo. If smb1 is so dangerouse why is it the only option ON WINDOWS 11 HOME?? . Are my files that i am supposed to be keeping other eyes off of safe from being taken ?? Or are they only at risk of encryption ?? I NEED to know what they mean when they sau using smb1 is risky..
No, SMB1 is NOT enabled by default in current Home Editions. It's a little awkward because it's the only one shown in the UI. However, take a look at the following article and run the commands to detect SMB2 and 3 to see which are enabled.
https://learn.microsoft.com/en-us/wi...le-smbv1-v2-v3
Hope this helps!
EDIT: Some additional info...
What is SMB1? Why Should You Disable it? - Appuals.com
A SMB1 server has security flaws. These were exploited by, amongst other things, the WannaCry ransomware attack.
WannaCry ransomware attack - Wikipedia
SMB1 is disabled by default in Windows 10/11, normally you don't need it as Win10/11 supports SMB2 and SMB3.. But there are a few times when it its still needed, such as connecting to shares on a Legacy NAS that only supports SMB1. If you have an XP machine on your network, that too only has SMB1. In that case enabling 'SMB 1.0/CIFS Client' is sufficient. Do NOT enable 'SMB 1.0/CIFS Server', that's would potentially make the PC vulnerable and is not needed if all you want is to be able to connect to a legacy share.
I am in a non-server peer to peer small network. I read all over that SMB is disabled by default, But both of these computers don't have it. Even when I try to turn it on with -set commands in powershell it wont show up.
It sounds to me like many peer to peer networks are not going to work no matter what you do unless you DO turn smb1 on. So then people buy a NAS. My question on security is on a small peer to peer network what does the vulnerability look like in that situation? Its one thing to get your files encrypted but another when they get taken. We can protect from encryption with image guardian and offline backups. All these systems will have a paid version of antivirus going all the time (Norton)
Don,
What Edition of Windows do you have?
Company IT depts can prevent some features being included with Windows. All I've noticed being reported is that Enterprise has this level of control.
Denis
Super cool, co-insidentaly, we are updating these laptops to windows 10 enterprise. So the problem with the home versions are going to go.
- - - Updated - - -
I have two older intel 64bit machines with windows 10 Enterprise Ver 21h2. Windows Feature Experience Pack 120.2212.4180.0. Then I have two laptops with home on them and will update those to the 10 Enterprise The Two intel 64bit machines did have slow mirrored 300gig drives and I put mirrored 500 gig ssd drives in those two older intel machines. It really does seam to be striped on loading stuff into memory.
I have an internal 3TB HDD in my Desktop [ NO OS Files, just for Files, Pictures, Music, Video, etc ] that I access from my 12 year old Laptop that works great. With that said, should I be worried or doing something else other than having the entries shown below ?
Both computers are Pro.
Thanks.
Paul,
What are the OSeseses on these computers?
All Windows 10?
Then you do not need SMB at all.
Denis
This all defiantly has my interest
- - - Updated - - -
So does it need SMB 2 or SMB direct then ? What protocal does windows use TCP-netbios ? way back with win 95 I was able to get my shares to show up if I used that. What are we dealing with in windows 10 if SMB can be turned off ?
Quote
