Windows 11 is about to get a lot more secure for SMB users everywhere

Focus Assist in Windows 11
(Image credit: Microsoft)

Microsoft is introducing new features in the next version of Windows 11 which should make it a lot more secure for some users.

In an update posted on the Microsoft blog, Microsoft Principal Program Manager Ned Pyle announced that Windows 11 will let admins mandate SMB client encryption for all outbound connections. That means admins can mandate that all destination servers support SMB 3.x and encryption, and if those are missing, the client won’t connect. 

“This enforces the highest level of network security as well as bringing management parity to SMB signing, which allows both client and server requirements,” Pyle explained. SMB encryption makes data encrypted end-to-end, a feature that prevents potential eavesdropping.

Caution is advised

The new feature is already rolling out with Windows 11 Insider Preview Build 25982 to Insiders in the Canary Channel.

"You can now also configure the SMB client to always require encryption, no matter what the server, share, UNC hardening, or a mapped drive requires," Pyle added. 

"This means an administrator can globally force a Windows machine to use SMB encryption – and therefore SMB 3.x – on all connections and refuse to connect if the SMB server does not support either."

Admins can configure the new feature via PowerShell or the “Require encryption” group policy that can be found under Computer Configuration \ Administrative Templates \ Network \Lanman Workstation.

Obviously, disabling the policy removes the encryption requirement. Pyle also cautioned IT teams when deploying SMB encryption through group policy to a heterogenous fleet, as any legacy SMB servers (think Windows Server 2008 R2) won’t support SMB 3.0. “Older third-party SMB servers might support SMB 3.0 but not encryption,” he added. 

The changes are part of Microsoft’s campaign to boost the security of both Windows and Windows Server for the modern threat landscape, Pyle concluded.

More from TechRadar Pro

TOPICS

Sead is a seasoned freelance journalist based in Sarajevo, Bosnia and Herzegovina. He writes about IT (cloud, IoT, 5G, VPN) and cybersecurity (ransomware, data breaches, laws and regulations). In his career, spanning more than a decade, he’s written for numerous media outlets, including Al Jazeera Balkans. He’s also held several modules on content writing for Represent Communications.

Read more
A phone sitting on a laptop keyboard with the Microsoft Outlook logo on the screen.
Microsoft is changing the way logins work: here’s what that means for you
Digital US flag
Biden orders review, new rules governing US national cybersecurity
Windows 11
Clues in Windows 11 suggest Microsoft has a nifty plan to help you move all your stuff from an old PC to a new computer more easily and conveniently
A laptop on a desk with the Windows 11 background on its screen.
Microsoft is adding image editing and compression to its Windows Share feature - and I couldn't be happier
Microsoft
"Another pair of eyes" - Microsoft launches all-new Security Copilot Agents to give security teams the upper hand
Concept art representing cybersecurity principles
Best encryption software of 2025
Latest in Security
cybersecurity
Chinese government hackers allegedly spent years undetected in foreign phone networks
Data leak
A major Keenetic router data leak could put a million households at risk
Code Skull
Interpol operation arrests 300 suspects linked to African cybercrime rings
Insecure network with several red platforms connected through glowing data lines and a black hat hacker symbol
Multiple routers hit by new critical severity remote command injection vulnerability, with no fix in sight
Code Skull
This dangerous new ransomware is hitting Windows, ARM, ESXi systems
An abstract image of a lock against a digital background, denoting cybersecurity.
Critical security flaw in Next.js could spell big trouble for JavaScript users
Latest in News
Open AI
OpenAI unveiled image generation for 4o – here's everything you need to know about the ChatGPT upgrade
Apple WWDC 2025 announced
Apple just announced WWDC 2025 starts on June 9, and we'll all be watching the opening event
Hornet swings their weapon in mid air
Hollow Knight: Silksong gets new Steam metadata changes, convincing everyone and their mother that the game is finally releasing this year
OpenAI logo
OpenAI just launched a free ChatGPT bible that will help you master the AI chatbot and Sora
An aerial view of an Instavolt Superhub for charging electric vehicles
Forget gas stations – EV charging Superhubs are using solar power to solve the most annoying thing about electric motoring
NetSuite EVP Evan Goldberg at SuiteConnect London 2025
"It's our job to deliver constant innovation” - NetSuite head on why it wants to be the operating system for your whole business