How to Check SMB Server Configuration in Windows 11

Learn how to check SMB server configuration in Windows 11 using PowerShell, inspect SMB settings, and troubleshoot file sharing.

If you are troubleshooting network file sharing in Windows 11, checking the SMB server configuration can help you identify settings that may affect network shares, authentication, security, and SMB connections.

Windows 11 includes PowerShell commands that allow you to inspect the configuration of the built-in SMB server. One of the most useful commands is Get-SmbServerConfiguration, which retrieves the current SMB server configuration.

This guide explains how to check SMB server configuration in Windows 11, how to understand the most important settings, and how to use the results when troubleshooting SMB file-sharing problems.

What Is SMB Server Configuration?

SMB stands for Server Message Block. It is the network protocol Windows uses for services such as file and printer sharing.

When a Windows 11 computer provides a shared folder that other computers can access over the network, the computer can act as an SMB server.

The SMB server configuration controls how the SMB service behaves. It is different from the permissions assigned to individual shared folders.

For example, you may have a shared folder called Projects. The folder can have its own share permissions and NTFS permissions, while the Windows SMB server has separate configuration settings that control how SMB connections are handled.

Understanding this distinction is important when troubleshooting network sharing because a problem may occur at the SMB server, share, permission, network, or firewall level.

Why Check SMB Server Configuration?

Checking the SMB server configuration can be useful when:

• Other computers cannot connect to a Windows shared folder.
• SMB connections fail unexpectedly.
• You need to check SMB protocol settings.
• You want to verify SMB signing configuration.
• You need to inspect SMB encryption settings.
• You are troubleshooting compatibility with another device.
• You want to check SMB Multichannel configuration.
• You need to document the current SMB configuration.
• You want to investigate a network sharing problem before changing settings.

Microsoft provides Get-SmbServerConfiguration specifically for retrieving the SMB server configuration.

What You Need Before Checking SMB Configuration

You can inspect SMB server configuration from PowerShell. For system-level troubleshooting, it is a good practice to open PowerShell with administrator privileges.

Open PowerShell as Administrator

1. Open the Start menu.
2. Search for PowerShell.
3. Right-click the PowerShell application.
4. Select Run as administrator.
5. Approve the User Account Control prompt if requested.

You can also use Windows Terminal and open an elevated PowerShell session.

How to Check SMB Server Configuration in Windows 11

After opening PowerShell, run:

Get-SmbServerConfiguration

This command displays the SMB server configuration available on the Windows computer.

The output can contain many properties, depending on the Windows version and SMB features available on the system.

Microsoft's documentation shows that the cmdlet retrieves the SMB server configuration and can return properties such as automatic share settings, SMB security settings, encryption-related settings, and other SMB service configuration values.

Display SMB Configuration in a More Readable Format

The default output can contain a large number of properties. If you want to inspect the configuration vertically, use:

Get-SmbServerConfiguration | Format-List

This format is useful when you want to carefully review many SMB settings.

You can also display a specific property:

Get-SmbServerConfiguration | Format-List RequireSecuritySignature

Using specific properties is often easier than searching through the complete output.

Check SMB Protocol Configuration

One of the first things to check when troubleshooting SMB compatibility is the protocol configuration.

You can display the SMB1 and SMB2-related properties with:

Get-SmbServerConfiguration | Select-Object EnableSMB1Protocol, EnableSMB2Protocol

The EnableSMB1Protocol property indicates the SMB1 server configuration, while EnableSMB2Protocol indicates the SMB2 protocol configuration.

SMB1 is an older protocol. You should not enable it simply because an older device cannot connect. First determine why the device requires SMB1 and whether the device or application can be upgraded.

If you are investigating an older network device, checking the SMB protocol configuration can help determine whether a protocol compatibility issue exists.

Check SMB Signing Settings

SMB signing is a security feature that can help protect SMB communication against tampering.

To inspect the server-side SMB signing settings, run:

Get-SmbServerConfiguration | Select-Object EnableSecuritySignature, RequireSecuritySignature

The two properties provide different information.

• EnableSecuritySignature indicates whether SMB signing is enabled in the server configuration.
• RequireSecuritySignature indicates whether the server requires SMB signing.

You can check the requirement specifically with:

Get-SmbServerConfiguration | Format-List RequireSecuritySignature

If the result is True, the server configuration requires SMB signing for applicable connections.

If an SMB client suddenly stops connecting after a security configuration change, comparing the server and client signing requirements can be useful during troubleshooting.

Check SMB Encryption Settings

SMB encryption is another security-related setting that may affect network file-sharing behavior.

To check the server encryption configuration, run:

Get-SmbServerConfiguration | Select-Object EncryptData

You can also inspect the setting related to rejecting unencrypted SMB access:

Get-SmbServerConfiguration | Select-Object EncryptData, RejectUnencryptedAccess

These settings should be interpreted together with the SMB capabilities and configuration of the client computer.

Do not change encryption settings simply because an SMB connection fails. First identify whether encryption is actually related to the problem.

Check SMB Multichannel Configuration

SMB Multichannel allows supported SMB connections to use multiple network paths under appropriate conditions.

To check whether SMB Multichannel is enabled in the server configuration, run:

Get-SmbServerConfiguration | Select-Object EnableMultiChannel

This shows the configured server setting, but it does not by itself prove that a particular SMB connection is actively using multiple channels.

To investigate active SMB Multichannel connections, you can use:

Get-SmbMultichannelConnection

This distinction is useful when troubleshooting performance. A feature being enabled in the configuration does not necessarily mean that every SMB connection will use multiple network paths.

Check SMB Automatic Share Settings

Windows SMB configuration also includes settings related to automatic administrative shares.

To inspect these settings, run:

Get-SmbServerConfiguration | Select-Object AutoShareServer, AutoShareWorkstation

These settings should be handled carefully because automatic administrative shares can be relevant to system administration and remote management.

Do not disable them simply because you see them in the SMB configuration. Determine whether the shares are required in your environment before making changes.

Check SMB Server Visibility Settings

You can also inspect the ServerHidden property:

Get-SmbServerConfiguration | Select-Object ServerHidden

This setting should not be confused with Network Discovery.

A computer not appearing in File Explorer's Network section can involve Network Discovery, network profile, firewall rules, sharing services, or other network configuration issues.

Microsoft's Windows file-sharing guidance recommends checking the network, Network Discovery, file and printer sharing, and related services when troubleshooting network sharing.

Check Several Important SMB Settings at Once

Instead of displaying the entire SMB configuration, you can select several important properties:

Get-SmbServerConfiguration | Select-Object `
EnableSMB1Protocol, `
EnableSMB2Protocol, `
EnableSecuritySignature, `
RequireSecuritySignature, `
EncryptData, `
EnableMultiChannel

This creates a compact overview that is easier to save, compare, or use during troubleshooting.

How to Save SMB Configuration for Troubleshooting

If you are troubleshooting a recurring network problem, saving the current configuration can make comparisons easier.

You can export selected properties to a CSV file:

Get-SmbServerConfiguration |
Select-Object EnableSMB1Protocol, EnableSMB2Protocol, EnableSecuritySignature, RequireSecuritySignature, EncryptData, EnableMultiChannel |
Export-Csv "$env:USERPROFILE\Desktop\smb-server-configuration.csv" -NoTypeInformation

This creates a CSV file on the desktop containing the selected SMB server settings.

Saving a baseline before changing configuration can help you determine exactly which settings changed later.

SMB Server Configuration vs SMB Share Permissions

It is important not to confuse SMB server configuration with SMB share permissions.

For example, this command checks the SMB server configuration:

Get-SmbServerConfiguration

While this command checks permissions for a particular SMB share:

Get-SmbShareAccess -Name "Projects"

They provide different information.

Command	What It Checks
Get-SmbServerConfiguration	SMB server behavior and configuration.
Get-SmbShare	Available SMB shares.
Get-SmbShareAccess	Permissions assigned to an SMB share.
Get-SmbSession	Active SMB sessions.
Get-SmbConnection	Active SMB client connections.
Get-SmbOpenFile	Files currently opened through SMB.

For a deeper look at share permissions, see our guide on how to check SMB share permissions in Windows 11.

How SMB Configuration Fits Into File Sharing

Windows network file sharing involves several different layers.

1. The computer must have a working network connection.
2. The network profile must allow the intended network behavior.
3. Network Discovery may need to be enabled for device discovery.
4. File and Printer Sharing must be configured appropriately.
5. Windows Firewall must allow the required traffic.
6. The SMB server must be operating correctly.
7. The SMB share must exist.
8. Share permissions must allow the user or group access.
9. NTFS permissions must allow the required file-system operation.
10. The client must be able to establish an SMB session and connection.

This is why changing one SMB setting is not always the correct solution to a network sharing problem.

SMB Troubleshooting Checklist

1. Check the Network Profile

Start by checking whether the computer is using the appropriate network profile.

Our guide explains how to check the network profile in Windows 11.

Microsoft notes that a Private network allows the PC to be discoverable by other devices and supports file and printer sharing, while Public networks hide the PC from other devices.

2. Check Network Discovery

If the computer or shared resources do not appear under Network in File Explorer, check Network Discovery settings.

Network Discovery is separate from the SMB server configuration itself.

3. Check File and Printer Sharing

Review File and Printer Sharing settings to make sure the Windows sharing configuration is appropriate.

Microsoft recommends enabling Network Discovery and File and Printer Sharing when troubleshooting Windows network file sharing.

4. Check Windows Firewall

A firewall can prevent network clients from reaching services even when SMB itself is configured correctly.

Review Windows 11 Firewall settings as part of the troubleshooting process.

5. Check the SMB Share

Confirm that the expected shared folder actually exists:

Get-SmbShare

You can also check a particular share:

Get-SmbShare -Name "Projects"

6. Check SMB Share Permissions

After confirming that the share exists, check its access control entries:

Get-SmbShareAccess -Name "Projects"

This helps determine whether the appropriate user or group has share-level access.

7. Check SMB Sessions

If clients are already connected, check active sessions:

Get-SmbSession

You can learn more in our guide on how to check SMB sessions in Windows 11.

8. Check SMB Connections

For client-side investigation, use:

Get-SmbConnection

Our SMB connections guide explains how to inspect connected servers, shares, users, and SMB dialect information.

9. Check Open SMB Files

If a file is locked or another user cannot modify it, check open SMB files:

Get-SmbOpenFile

See our guide on how to check open SMB files in Windows 11 for more details.

Should You Change SMB Server Configuration?

The main purpose of Get-SmbServerConfiguration is to inspect the current configuration. You should normally investigate the existing settings before making changes.

Microsoft provides Set-SmbServerConfiguration to modify SMB server configuration. The cmdlet supports many parameters, including settings related to SMB signing, encryption, automatic shares, SMB1, and other SMB service behavior.

For example, Microsoft documents commands for changing SMB signing and encryption:

$Parameters = @{
    RequireSecuritySignature = $true
    EnableSecuritySignature = $true
    EncryptData = $true
    Confirm = $false
}

Set-SmbServerConfiguration @Parameters

However, this is a configuration change rather than a diagnostic command. Do not apply configuration changes merely because they appear in an example.

Before changing an SMB setting:

• Record the existing configuration.
• Identify the actual problem.
• Determine which setting is related to the problem.
• Check client compatibility.
• Consider security implications.
• Test the change in an appropriate environment.
• Document what was changed.

Useful SMB Server Configuration Commands

PowerShell Command	Purpose
Get-SmbServerConfiguration	Display the SMB server configuration.
Get-SmbServerConfiguration | Format-List	Display SMB configuration as a detailed list.
Get-SmbServerConfiguration | Select-Object EnableSMB1Protocol, EnableSMB2Protocol	Check SMB protocol configuration.
Get-SmbServerConfiguration | Select-Object RequireSecuritySignature	Check whether SMB signing is required.
Get-SmbServerConfiguration | Select-Object EncryptData	Check SMB encryption configuration.
Get-SmbServerConfiguration | Select-Object EnableMultiChannel	Check SMB Multichannel configuration.
Get-SmbShare	List SMB shares.
Get-SmbShareAccess	Check SMB share permissions.
Get-SmbSession	Check active SMB sessions.
Get-SmbConnection	Check SMB client connections.
Get-SmbOpenFile	Check files opened through SMB.
Set-SmbServerConfiguration	Modify SMB server configuration.

Frequently Asked Questions

What command checks SMB server configuration in Windows 11?

Use Get-SmbServerConfiguration in PowerShell. It retrieves the SMB server configuration.

How do I check whether SMB1 is enabled?

Run:

Get-SmbServerConfiguration | Select-Object EnableSMB1Protocol

How do I check SMB2 configuration?

Run:

Get-SmbServerConfiguration | Select-Object EnableSMB2Protocol

How do I check whether SMB signing is required?

Run:

Get-SmbServerConfiguration | Select-Object RequireSecuritySignature

A True result means the server configuration requires SMB signing.

How do I check SMB encryption?

Run:

Get-SmbServerConfiguration | Select-Object EncryptData

How do I check SMB Multichannel?

Check the server configuration with:

Get-SmbServerConfiguration | Select-Object EnableMultiChannel

To inspect active Multichannel connections, use:

Get-SmbMultichannelConnection

Is SMB server configuration the same as SMB share permissions?

No. SMB server configuration controls SMB service behavior. Share permissions control access to a particular SMB share, while NTFS permissions control access to the underlying files and folders.

Can I change SMB server configuration with PowerShell?

Yes. Microsoft provides Set-SmbServerConfiguration for modifying SMB server settings. Changes should be made carefully because they can affect security, compatibility, and network access.

Why can I access the computer but not a shared folder?

The problem may be related to the SMB share, share permissions, NTFS permissions, authentication, firewall configuration, or an active SMB connection. Check each layer instead of changing SMB server settings immediately.

Final Thoughts

Checking SMB server configuration is an important diagnostic step when troubleshooting Windows 11 network file sharing.

The Get-SmbServerConfiguration command provides a convenient way to inspect the SMB server instead of checking individual settings manually. You can use it to review protocol configuration, SMB signing, encryption, Multichannel, automatic shares, and other SMB-related properties.

For the most effective troubleshooting process, start with read-only inspection. Record the current SMB configuration before making changes, then compare it with the requirements of the client computer and the shared resource.

Remember that SMB server configuration is only one part of Windows file sharing. Network profile, Network Discovery, File and Printer Sharing, firewall rules, SMB shares, share permissions, NTFS permissions, SMB sessions, SMB connections, and open files can all affect the final result.

By checking these components systematically, you can narrow down network sharing problems without making unnecessary changes to the Windows SMB configuration.

---

Related Windows 11 SMB Guides

• How to Check Shared Folders in Windows 11
• How to Check Shared Folder Permissions in Windows 11
• How to Check SMB Share Permissions in Windows 11
• How to Check SMB Sessions in Windows 11
• How to Check SMB Connections in Windows 11
• How to Check Open SMB Files in Windows 11
• How to Check Network Profile in Windows 11
• How to Check Network Discovery Settings in Windows 11
• How to Check File and Printer Sharing Settings in Windows 11
• How to Check Windows 11 Firewall Settings