Skip to content

Check that the insecure SMB1 file-sharing protocol is off — via Microsoft Learn

Commandlow riskNeeds adminWindows 11Windows 10

SMBv1 is the old, insecure version of Windows file sharing. Windows 11 doesn't install it by default, but older or upgraded PCs may still have it. One command tells you whether it's there; another removes it.

Restart the computer

The easy way

  1. GUI route: Control Panel → Programs and Features → Turn Windows features on or off → clear SMB 1.0/CIFS File Sharing Support → OK → Restart.

Command

Run in an administrator PowerShell / Terminal window.

Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol
Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

Undo

Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol
Microsoft strongly advises against SMB1. If an old NAS or printer needs it, update or replace that device instead of turning SMB1 back on. To check without admin rights: Get-SmbServerConfiguration | Format-List EnableSMB1Protocol. On 24H2, SMB signing is required by default, which can also break connections to old NAS boxes. Microsoft says to fix signing on the device, not to change SMB versions.

Sources

Source reviewed
2026-11-02
Link checked
2026-11-02
Tested hands-on
Not by Oddbyte.Me

Oddbyte.Me hasn't tried this on every Windows build, so keep the undo handy.

smb1smbv1securityfile sharingnas

More in Networking

Flush the DNS cache — via Marc Abramowitz

Commandlow riskAdmin

If a website moved to a new server, or you changed DNS settings and some sites still won't load, your Mac may be holding on to old address lookups. Flushing the DNS cache makes it look them up fresh. It's a troubleshooting step, not a speed boost.

Run Apple's built-in internet speed test — via SS64

Commandlow risk

macOS has its own speed test in Terminal. Besides download and upload speed, it measures 'responsiveness' (round trips per minute while the line is busy), which explains why video calls stutter on a connection that looks fast.