ADMX Viewer
AddSystemHard.Policies.AddMSFTHard• Machine

Configure SMBv1 client driver

Download ADMX

Configures the SMBv1 client driver's start type. To disable client-side processing of the SMBv1 protocol, select the "Enabled" radio button, then select "Disable driver" from the dropdown. WARNING: DO NOT SELECT THE "DISABLED" RADIO BUTTON UNDER ANY CIRCUMSTANCES! For Windows 7 and Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012, you must also configure the "Configure SMBv1 client (extra setting needed for pre-Win8.1/2012R2)" setting. To restore default SMBv1 client-side behavior, select "Enabled" and choose the correct default from the dropdown: * "Manual start" for Windows 7 and Windows Server 2008, Windows Server 2008 R2, and Windows Server 2012; * "Automatic start" for Windows 8.1 and Windows Server 2012 R2 and newer. Changes to this setting require a reboot to take effect. For more information, see https://support.microsoft.com/kb/2696547

Policy Details

Policy Name
Pol_SecGuide_0002_SMBv1_ClientDriver
Registry Key
SYSTEM\CurrentControlSet\Services\MrxSmb10
Supported On
At least Windows Server 2008 R2 or Windows 7
Available Languages
en-usfr-fr

Configuration Elements

Configure MrxSmb10 driver:

Type: enum

Allowed Values
  • 4 Disable driver (recommended)
  • 3 Manual start (default for Windows 7/Server 2008/Server 2008 R2/Server 2012)
  • 2 Automatic start (default for Windows 8.1/Server 2012 R2/newer)