SMB security and file-share access from the client

Skills you'll practise

• Describe how an SMB connection is set up (negotiate, session setup, tree connect) and read the dialect, signing and encryption of current connections
• Explain why SMB signing requirements and blocked guest access stop some older NAS devices, and choose a fix that keeps the security setting
• Diagnose file-share failures in order (name, port 445, share, authentication, permissions) from their error codes and tests

Course outline

1. 1.SMB security and file-share access from the clientVideo · 6 min
2. 2.How an SMB connection is set upLesson · 14 min
3. 3.Signing, encryption and secure defaults that break old devicesLesson · 15 min
4. 4.Diagnosing 'I can't open the share' step by stepLesson · 14 min
5. 5.SMB security and file-share access from the client: knowledge checkKnowledge check · 16 questions
6. 6.SMB security and file-share access from the client: practical exerciseKnowledge check · 1 question
7. 7.Scanner share fails after a Windows updateScenario
8. 8.Final exam6 questions · passing it completes the course, so people who already know the material can test out

Sources it draws on

The lessons and questions are written from these references, so learners can go back to the original.

• Microsoft Learn: Overview of file sharing using the SMB 3 protocol
• Microsoft Learn: Control SMB signing behavior
• Microsoft Learn: Guest access in SMB2 and SMB3 disabled by default
• Microsoft Learn: Get-SmbConnection