How to Enable SMB1 on Windows 11 Safely and Effectively

Enabling SMB1 on Windows 11 can be necessary when connecting to older network devices, legacy servers, or systems that still rely on this outdated protocol. While SMB1 is considered insecure and its use is generally discouraged, some environments still require it for compatibility reasons. Before proceeding, ensure that you understand the security implications, as SMB1 is vulnerable to various attacks. Always consider updating legacy systems or seeking alternatives that support newer, more secure protocols.

What You’ll Need

• A Windows 11 PC with administrative access
• Internet connection (optional, for downloading updates)
• Knowledge of your network environment, especially if connecting to specific legacy devices

Step-by-Step

1. Open the Windows Search bar by clicking the magnifying glass icon or pressing Windows key + S.
2. Type “Control Panel” and select the Control Panel app from the search results.
3. In Control Panel, set the view to “Large icons” or “Small icons” to see all options clearly.
4. Click on “Programs and Features,” then select “Turn Windows features on or off” from the left sidebar.
5. Scroll down the list until you find “SMB 1.0/CIFS File Sharing Support.”
6. Check the box next to “SMB 1.0/CIFS File Sharing Support” to enable it.
7. Click “OK” to apply the changes. Windows might prompt you to restart your PC to complete the installation.
8. Restart your computer when prompted to ensure the changes take effect.
9. After reboot, confirm that SMB1 is enabled by opening PowerShell as an administrator (right-click Start, select “Windows PowerShell (Admin)”).
10. Type the command: Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol
11. Check the “State” value; it should read “Enabled.” If not, repeat the previous steps or troubleshoot further.

Common Mistakes

• Enabling SMB1 without understanding security risks, which can expose your network to malware and cyberattacks.
• Forgetting to restart your PC after enabling the feature, which prevents SMB1 from being active.
• Attempting to enable SMB1 on Windows editions or configurations where the feature is not available or has been deprecated.
• Not verifying whether the network device or server actually requires SMB1, leading to unnecessary security exposure.

Tips

• Only enable SMB1 temporarily if absolutely necessary, and disable it as soon as possible afterward.
• Consider updating or replacing legacy devices that require SMB1 to use SMB2 or SMB3, which are more secure.
• Use Windows Defender or other security tools to monitor network activity when SMB1 is enabled.
• Keep your Windows 11 system updated to ensure all security patches are applied, even if SMB1 is enabled.
• Use a firewall to restrict SMB1 traffic to trusted devices only.

Troubleshooting

If SMB1 does not enable or work as expected, try the following steps:

• Ensure your Windows 11 version supports SMB1. Some editions or configurations may have it disabled by default or removed.
• Verify that your system has the latest updates installed, as updates can fix bugs related to Windows features.
• Run the PowerShell command again to check the feature status and look for errors.
• If the feature is not available, consider installing the Windows Server features via DISM commands or Group Policy, or consult Microsoft support.
• Disable SMB1 immediately if you suspect malicious activity or if it’s no longer needed, to protect your network.

Frequently Asked Questions

Is SMB1 safe to enable on Windows 11?

Enabling SMB1 poses security risks as it is outdated and vulnerable to attacks like WannaCry. Use it only when necessary and disable it afterward.

Why do I need to enable SMB1?

Some legacy devices or servers only support SMB1, making it necessary for compatibility in certain network environments.

How can I disable SMB1 after use?

Follow the same steps to uncheck the SMB1 feature in Windows Features or use PowerShell to disable it with the command: Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol.

Is there a better alternative to SMB1?

Yes, upgrading legacy devices to support SMB2 or SMB3 is recommended, as these protocols are more secure and supported in modern Windows versions.

Can I enable SMB1 via Command Prompt?

While the GUI method is recommended, you can enable SMB1 using DISM commands in Command Prompt with administrator privileges, such as: dism /online /enable-feature /featurename:SMB1Protocol /all.

What security measures should I take when SMB1 is enabled?

Limit SMB1 traffic to trusted devices, use firewalls, keep your system updated, and disable SMB1 as soon as possible after use to minimize security risks.

Related

• How to Check Memory on Windows 11 for Optimal Performance
• How to Check Print History on Windows 11 Easily
• How to Check MAC Address on Windows 10 Easily