Disable the SMBv1 server
Turns off the obsolete SMB1 file-sharing server protocol.
Applying it needs Nexus Standard or Pro. Every plan can read it here and undo it in Restore Center. Compare plans
What it changes
HKLM\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters\SMB1 = 0
Before anything is written, the review screen shows this setting's current value on your PC next to the new one.
Why it helps
Closes the protocol exploited by WannaCry-style worms.
Trade-offs
Very old devices that only speak SMB1 can't reach shares on this PC.
Evidence
Strong evidence means: documented by microsoft or consistently measurable. Expected impact is small (1 of 3): how much it can matter when this is actually the bottleneck on your PC, not a promised gain.
Is it in a pack?
Yes. It's in the Security hardening pack, so that pack and Optimize everything include it. You can still untick it in the review screen.
How to undo
Switch the tweak off in Nexus, or open Restore Center and restore this change (or choose Undo last change). Nexus writes back the original value it recorded before applying, not a generic default, then reads it back to confirm.
Like applying it, undoing it takes full effect after you restart.
More in Security hardening
- Turn off AutoRun for all drivesStops programs starting automatically from inserted USB drives and discs.SafeSecurityRecommended
- Turn off AutoPlayStops Windows asking what to do with inserted media and devices.SafeSecurity
- Turn off LLMNRDisables Link-Local Multicast Name Resolution.SafeSecurity
- Turn off smart multi-homed name resolutionStops DNS queries being sent over every network adapter at once.SafeSecurity
- Turn off Remote AssistanceStops this PC accepting Remote Assistance invitations.SafeSecurityRecommended
- Turn off Remote DesktopDenies incoming Remote Desktop connections.CautionSecurity