To mitigate, Install Security Patches in a Timely manner.

Also note that only works on windows 7 and later, dism is not a tool for XP or Windows 2003 which seem to be the largest numbers hit by this since there is/was no patches for them

Careful, most old scanners out there only talk SMB1.

I'm all for recommending defence in depth, but please study changes like this before doing them.