Create or edit a configuration profile with the following information:

Create or edit the following script and configure it to run when the check fails:

SELECT 1 FROM windows_optional_features WHERE name = 'SMB1Protocol-Server' AND state != 1

$feature = Get-WindowsOptionalFeature -FeatureName 'SMB1Protocol-Server' -Online -ErrorAction SilentlyContinue
if ($feature -and $feature.State -ne 'Enabled') {
    Write-Output 1
} else {
    Write-Output 0
}