PCs Can't Log On to the Domain After Removing SMB1: Fix

22 December 2025

Symptom: after removing SMB 1.0/CIFS File Sharing Support, some computers can't log on with domain users and can't be joined to the domain again.

Cause: the Workstation service (LanmanWorkstation) still depends on the SMB1 driver (mrxsmb10), so it doesn't start.

Fix:

Log on with a local administrator. If there isn't one, boot a WinPE (for example Sergei Strelec) to enable or create it.
In an elevated PowerShell:

sc.exe config lanmanworkstation depend= bowser/mrxsmb20/nsi
sc.exe config mrxsmb20 start= auto

Restart. The computer should log on to the domain again.

Check:

sc.exe qc lanmanworkstation
Get-Service LanmanWorkstation
Test-ComputerSecureChannel

If the secure channel is still broken: Test-ComputerSecureChannel -Repair -Credential DOMAIN\admin.