Just SMBv1 in this case, here is how:
https://support.microsoft.com/en-gb/help/2696547/how-to-enab...Also, decent AV and anti spam and don't open email attachments without some prior analysis. Backups - good backups and check them at least weekly.
Actually just do all the boring stuff that IT Security have been recommending for years.
