TMA-WIN-SMB1
Ensure SMBv1 server is disabled
CriticalLevel 1Automatedwindows
Description
SMBv1 is obsolete and exploitable.
How it is checked
Audit method: Shell command
shell
(Get-SmbServerConfiguration).EnableSMB1Protocol- Expected output
False
How it is fixed
Fix method: Shell command
shell
Set-SmbServerConfiguration -EnableSMB1Protocol $false -ForceProperties
- Operating systems
- Any
- Tags
- windowssmb
- Reference
- CIS Microsoft Windows Server Benchmark - Network / SMB
Check this host
Run this on a machine you are allowed to audit. The scan is read-only.
shell
tmaegis scan --target windows