{"id":808025,"date":"2026-05-13T11:04:03","date_gmt":"2026-05-13T11:04:03","guid":{"rendered":"https:\/\/www.ninjaone.com\/?post_type=script_hub&p=808025"},"modified":"2026-05-13T11:04:03","modified_gmt":"2026-05-13T11:04:03","slug":"como-desativar-smbv1-powershell","status":"publish","type":"script_hub","link":"https:\/\/www.ninjaone.com\/pt-br\/script-hub\/como-desativar-smbv1-powershell\/","title":{"rendered":"Como desativar o SMBv1 (Server Message Block Protocol) com o PowerShell"},"content":{"rendered":"

O Server Message Block Protocol (SMB)<\/a> j\u00e1 existe h\u00e1 algum tempo, servindo como espinha dorsal para o compartilhamento de arquivos e v\u00e1rias outras opera\u00e7\u00f5es de rede. No entanto, a vers\u00e3o mais antiga, SMBv1, agora \u00e9 vista como um problema devido a uma s\u00e9rie de vulnerabilidades de seguran\u00e7a. Se voc\u00ea \u00e9 um profissional de TI ou um provedor de servi\u00e7os gerenciados (MSP), garantir a seguran\u00e7a da rede deve ser sua principal preocupa\u00e7\u00e3o. Ent\u00e3o, como voc\u00ea faz para desativar o SMBv1<\/strong> de forma eficaz?<\/p>\n

O que o script faz?<\/h2>\n

O script do PowerShell em quest\u00e3o foi projetado com uma finalidade muito espec\u00edfica: desativar o SMBv1 em ambientes Windows. Ele funciona usando uma sequ\u00eancia de cmdlets integrados do PowerShell e manipula\u00e7\u00f5es do Registro para garantir que o SMBv1 seja completamente desativado. O script pode ser executado em um ambiente Windows 10 ou Windows Server 2016 ou posterior, o que o torna altamente vers\u00e1til e valioso para qualquer sistema Windows moderno.<\/p>\n

O roteiro: Desativar SMBv1<\/h2>\n
#Requires -Version 5.1\r\n\r\n<#\r\n.SYNOPSIS\r\n    Disables SMB v1\r\n.DESCRIPTION\r\n    Disables SMB v1 via Get-WindowsOptionalFeature, Set-SmbServerConfiguration, or Registry\r\n.EXAMPLE\r\n    No parameters needed.\r\n.EXAMPLE\r\n    PS C:> Disable-SMBv1.ps1\r\n    No parameters needed.\r\n.OUTPUTS\r\n    None\r\n.NOTES\r\n    Minimum OS Architecture Supported: Windows 10, Windows Server 2016\r\n    Release Notes:\r\n    Initial Release\r\nBy using this script, you indicate your acceptance of the following legal terms as well as our Terms of Use at https:\/\/www.ninjaone.com\/terms-of-use.\r\n    Ownership Rights: NinjaOne owns and will continue to own all right, title, and interest in and to the script (including the copyright). NinjaOne is giving you a limited license to use the script in accordance with these legal terms. \r\n    Use Limitation: You may only use the script for your legitimate personal or internal business purposes, and you may not share the script with another party. \r\n    Republication Prohibition: Under no circumstances are you permitted to re-publish the script in any script library or website belonging to or under the control of any other software provider. \r\n    Warranty Disclaimer: The script is provided \u201cas is\u201d and \u201cas available\u201d, without warranty of any kind. NinjaOne makes no promise or guarantee that the script will be free from defects or that it will meet your specific needs or expectations. \r\n    Assumption of Risk: Your use of the script is at your own risk. You acknowledge that there are certain inherent risks in using the script, and you understand and assume each of those risks. \r\n    Waiver and Release: You will not hold NinjaOne responsible for any adverse or unintended consequences resulting from your use of the script, and you waive any legal or equitable rights or remedies you may have against NinjaOne relating to your use of the script. \r\n    EULA: If you are a NinjaOne customer, your use of the script is subject to the End User License Agreement applicable to you (EULA).\r\n#>\r\n\r\n[CmdletBinding()]\r\nparam ()\r\n\r\nbegin {\r\n    function Test-IsElevated {\r\n        $id = [System.Security.Principal.WindowsIdentity]::GetCurrent()\r\n        $p = New-Object System.Security.Principal.WindowsPrincipal($id)\r\n        if ($p.IsInRole([System.Security.Principal.WindowsBuiltInRole]::Administrator))\r\n        { Write-Output $true }\r\n        else\r\n        { Write-Output $false }\r\n    }\r\n    function Set-ItemProp {\r\n        param (\r\n            $Path,\r\n            $Name,\r\n            $Value,\r\n            [ValidateSet(\"DWord\", \"QWord\", \"String\", \"ExpandedString\", \"Binary\", \"MultiString\", \"Unknown\")]\r\n            $PropertyType = \"DWord\"\r\n        )\r\n        # Do not output errors and continue\r\n        $ErrorActionPreference = [System.Management.Automation.ActionPreference]::SilentlyContinue\r\n        if (-not $(Test-Path -Path $Path)) {\r\n            # Check if path does not exist and create the path\r\n            New-Item -Path $Path -Force | Out-Null\r\n        }\r\n        if ((Get-ItemProperty -Path $Path -Name $Name)) {\r\n            # Update property and print out what it was changed from and changed to\r\n            $CurrentValue = Get-ItemProperty -Path $Path -Name $Name\r\n            try {\r\n                Set-ItemProperty -Path $Path -Name $Name -Value $Value -Force -Confirm:$false -ErrorAction Continue | Out-Null\r\n            }\r\n            catch {\r\n                Write-Error $_\r\n            }\r\n            Write-Host \"$Path$Name changed from $CurrentValue to $(Get-ItemProperty -Path $Path -Name $Name)\"\r\n        }\r\n        else {\r\n            # Create property with value\r\n            try {\r\n                New-ItemProperty -Path $Path -Name $Name -Value $Value -PropertyType $PropertyType -Force -Confirm:$false -ErrorAction Continue | Out-Null\r\n            }\r\n            catch {\r\n                Write-Error $_\r\n            }\r\n            Write-Host \"Set $Path$Name to $(Get-ItemProperty -Path $Path -Name $Name)\"\r\n        }\r\n        $ErrorActionPreference = [System.Management.Automation.ActionPreference]::Continue\r\n    }\r\n    $Disable = 0\r\n    # $Enable = 1 # Not Used\r\n}\r\nprocess {\r\n    if (-not (Test-IsElevated)) {\r\n        Write-Error -Message \"Access Denied. Please run with Administrator privileges.\"\r\n        exit 1\r\n    }\r\n    \r\n    # Try using Get-WindowsOptionalFeature first\r\n    if (-not $(Get-Command -Name \"Get-WindowsOptionalFeature\").Name -like \"Get-WindowsOptionalFeature\") {\r\n        Write-Host \"Get-WindowsOptionalFeature command not found. Continuing.\"\r\n    }\r\n    else {\r\n        if ((Get-WindowsOptionalFeature -Online -FeatureName smb1protocol -ErrorAction SilentlyContinue).State -notlike \"Disabled\") {\r\n            # Disables smb1protocol feature\r\n            try {\r\n                Disable-WindowsOptionalFeature -Online -FeatureName smb1protocol\r\n                # Disabled SMB1, exit\r\n                exit 0\r\n            }\r\n            catch {\r\n                Write-Host \"smb1protocol feature not found. Continuing.\"\r\n            }\r\n        }\r\n    }\r\n\r\n    if (-not $(Get-Command -Name \"Get-SmbServerConfiguration\").Name -like \"Get-SmbServerConfiguration\") {\r\n        Write-Host \"Get-SmbServerConfiguration command not found. Continuing.\"\r\n        $Path = \"HKLM:SYSTEMCurrentControlSetServicesLanmanServerParameters\"\r\n        $Name = \"SMB1\"\r\n        # https:\/\/docs.microsoft.com\/en-us\/windows-server\/storage\/file-server\/troubleshoot\/detect-enable-and-disable-smbv1-v2-v3#registry-editor\r\n        # Sets SMB1 to 0\r\n        Set-ItemProp -Path $Path -Name $Name -Value $Disable\r\n    }\r\n    if ((Get-SmbServerConfiguration).EnableSMB1Protocol) {\r\n        try {\r\n            Set-SmbServerConfiguration -EnableSMB1Protocol $false            \r\n        }\r\n        catch {\r\n            Write-Host \"Failed to disable SMBv1.\"\r\n            exit 1\r\n        }\r\n    }\r\n}\r\nend {}<\/pre>\n
 <\/p>\n\n
Acesse mais de 300 scripts no NinjaOne Dojo<\/p>\n
Obter acesso<\/a><\/p>\n<\/div>\n
Preocupa\u00e7\u00f5es com a seguran\u00e7a em torno do SMBv1<\/h2>\n
O SMBv1 \u00e9 conhecido por suas defici\u00eancias de seguran\u00e7a. Ele tem sido um alvo frequente de v\u00e1rios tipos de ataques, ransomware e viola\u00e7\u00f5es de dados. Ter o SMBv1 ativado \u00e9 como deixar a porta da frente aberta; voc\u00ea est\u00e1 simplesmente convidando problemas. Esse script do PowerShell alivia esse problema de forma eficaz, desativando o SMBv1.<\/p>\n
Tempo e efici\u00eancia<\/h2>\n
A desativa\u00e7\u00e3o manual do SMBv1 pode ser uma tarefa demorada, especialmente em ambientes de rede de grande escala. Esse script automatiza o processo, economizando tempo e esfor\u00e7o valiosos. Para os MSPs que gerenciam redes de v\u00e1rios clientes, essa ferramenta \u00e9 uma d\u00e1diva de Deus.<\/p>\n
Abordagem abrangente<\/h2>\n
O script tenta desativar o SMBv1 por meio de v\u00e1rios caminhos, incluindo o cmdlet Get-WindowsOptionalFeature, o cmdlet Set-SmbServerConfiguration e edi\u00e7\u00f5es diretas no Registro. Isso garante que o protocolo seja desativado, mesmo que um dos m\u00e9todos falhe ou n\u00e3o esteja dispon\u00edvel no sistema em quest\u00e3o.<\/p>\n
Como usar o script Disable SMBv1<\/h2>\n
A execu\u00e7\u00e3o do script \u00e9 simples. Aqui est\u00e1 um guia r\u00e1pido:<\/p>\n
    \n
  1. Salve o script em um arquivo chamado Disable-SMBv1.ps1.<\/li>\n
  2. Abra o PowerShell como administrador.<\/li>\n
  3. Navegue at\u00e9 a pasta onde voc\u00ea salvou o script.<\/li>\n
  4. Execute o script digitando PS C:>.Disable-SMBv1.ps1 e pressionando Enter.<\/li>\n<\/ol>\n
    Certifique-se de que voc\u00ea tenha privil\u00e9gios de administrador ou o script ser\u00e1 encerrado, garantindo que voc\u00ea n\u00e3o fa\u00e7a altera\u00e7\u00f5es acidentais que n\u00e3o deveria.<\/p>\n
    Quem precisa desse roteiro?<\/h2>\n