The PSSmb module includes commands for easily working with SMB functionality.
PSSmb contains commands for getting the status of SMB client and server components, and enabling and disabling the different versions installed.
Due to recent vulnerabilities like EternalBlue that was used by the ransomware WannaCry and the wiper PetyaWrap, it is now recommended to disable both the client and server components of SMB version 1 entirely, and can be done with Group Policy using the Disable-SmbByGpo command.
It is important to point out that SMB versions 2 and 3 use the same stack, so enabling or disabling one of these versions will cause the same thing to happen to the other version.
When using the Enable-Smb or Disable-Smb commands, it is recommended to use the Restart parameter to cause the computer to immediately reboot after the changes have been made. This is required for the changes to take effect
Get-Smb is used to get the status of the client and server components of the different versions installed on the machine.
Disable-Smb is used to turn off specific SMB versions.
Enable-Smb is used to turn on specific SMB versions.
Disable-SmbByGpo is used to create a Group Policy object that is used to disable SMB version 1.
SMB WannaCry WCry EternalBlue SMB1 SMB2 GPO