Safely enable SMB1 on Windows 11 for legacy NAS migrations

PowerShellPro

Is anyone here using SMB1 on Windows 11 for connecting to super old devices (like legacy NAS or printers)? I read a lot about the security risks, and I see Microsoft disables it by default now. However, I still have an old NAS that doesn’t support newer SMB versions.

Is there any safe way to enable just enough SMB1 so I can migrate files off the old device, without exposing the rest of my Windows 11 system? Maybe running it in a virtual machine, or is there some method to just temporarily enable it safely?

Also, does anyone know if there are updated tools to help convert or update those old devices, or is enabling SMB1 for one last transfer still the only way? Would love tips from anyone who had to deal with this recently!

directxdevotee

Honestly, running SMB1 inside a temporary Windows VM with strict network isolation is probably the safest route if you can’t avoid it. Just don’t connect that VM to anything but your NAS, and kill it when you’re done. As for updating the NAS, some people have had luck with firmware hacks or open source projects like OpenMediaVault on really ancient boxes, but results vary. If it’s a printer, you might have better luck finding alternative print server software, but for file transfers, sometimes the VM method really is the least risky option left.

processmonitor

Adding to what’s been said, if your old NAS supports FTP or another protocol (even if you’ve never used it), you might check if those are enabled as alternatives to SMB1. Sometimes outdated devices still offer FTP or WebDAV, which can be safer to use temporarily for file extraction. If not, isolating SMB1 in a VM like described above is indeed your best bet. Just remember to disable or remove the SMB1 feature as soon as you’re finished. Good luck with the migration!

RosieSolis

One little trick: if you have a Raspberry Pi or similar lying around, you can use it as a go-between-connect it to your old NAS with SMB1, then mount it on your Windows PC using SMB3 or newer. Saves you from contaminating your main system or spinning up a full VM. Sometimes a $35 pi is the best IT “antivirus” available!