ADMX Viewer
Microsoft.Policies.SecGuide• Machine

Configure SMB v1 client driver

Download ADMX

Configures the SMB v1 client driver's start type. To disable client-side processing of the SMBv1 protocol, select the "Enabled" radio button, then select "Disable driver" from the dropdown. WARNING: DO NOT SELECT THE "DISABLED" RADIO BUTTON UNDER ANY CIRCUMSTANCES! For Windows 7 and Servers 2008, 2008R2, and 2012, you must also configure the "Configure SMB v1 client (extra setting needed for pre-Win8.1/2012R2)" setting. To restore default SMBv1 client-side behavior, select "Enabled" and choose the correct default from the dropdown: * "Manual start" for Windows 7 and Windows Servers 2008, 2008R2, and 2012; * "Automatic start" for Windows 8.1 and Windows Server 2012R2 and newer. Changes to this setting require a reboot to take effect. For more information, see https://support.microsoft.com/kb/2696547

Policy Details

Policy Name
Pol_SecGuide_0002_SMBv1_ClientDriver
Registry Key
SYSTEM\CurrentControlSet\Services\MrxSmb10
Supported On
At least Windows Server 2008 R2 or Windows 7
OMA-URI (CSP)
MSSecurityGuide/ConfigureSMBV1ClientDriver
OS Build Version:10.0.17134
CSP Version:7.0
Conflict Resolution:LastWrite
Allowed Editions:
EnterpriseEnterprise NProfessionalProfessional NEnterprise EvaluationEnterprise N EvaluationEducationEducation NEnterprise SEnterprise S NEnterprise S EvaluationEnterprise S N EvaluationPro Single LanguagePro ChinaPro WorkstationPro Workstation NPro For EducationPro For Education NEnterprisegEnterprisegnServerrdshIotenterpriseIotenterprisesCloudeditionnCloudeditionIotenterpriseskIotenterpriseseval
Available Languages
en-us

Configuration Elements

Configure MrxSmb10 driver

Type: enum

Allowed Values
  • 4 Disable driver (recommended)
  • 3 Manual start (default for Win7/2008/2008R2/2012)
  • 2 Automatic start (default for Win8.1/2012R2/newer)