How to Configure SMB Encryption for a Windows File Share Print

Applies to: Windows Server 2019, Windows Server 2022, and Windows Server 2025.

SMB encryption protects file traffic from interception without requiring IPsec.

Prerequisites

• Administrative access and an approved change window.
• A verified backup and documented rollback plan.
• A pilot environment or low-risk target for validation.

Step-by-step procedure

1. Confirm client compatibility and select the sensitive share.
2. Enable encryption on the individual share.
3. Test access from every supported client.
4. Monitor SMB server events and performance.

Commands

Set-SmbShare -Name "Finance" -EncryptData $true
Get-SmbShare -Name "Finance" | Select Name,EncryptData

Verification

The share reports EncryptData True and approved clients can read and write files.

Rollback

Set EncryptData to false only after restoring another approved transport-protection control.

Security notes

• Use least privilege and record the change.
• Review relevant event logs after implementation.
• Test before production rollout.

Related resources

Canadian Windows VPS and RDS hosting: networkmanager.info. Refer to Microsoft Windows Server documentation.