On my network I have to run two XP VM, because of legacy programs.

How can I mitigate MS17-010 on Windows XP? The machines are not directly exposed to internet, but they must be connected to the LAN.

Is enough to disable SMB server for avoid having my VM infected? I don't need a SMB server on the machine, but I need to access SMB clients from it.