Creating and securing SMB shares

With your file server service set up, the next step in deploying a file server is to create SMB shares and secure them. For decades, administrators have used the net.exe command to set up shared folders and to do a lot more. These continue to work, but you may find the new cmdlets easier to use, particularly if you're automating large-scale SMB server deployments.

This recipe looks at creating and securing shares on a Server 2019 platform using the PowerShell SMBServer module. You also use cmdlets from the NTFSSecurity module (a third-party module you download from the PS Gallery).

Getting ready

You run this recipe on the file server (FS1) that you set up and hardened in the Setting up and securing your SMB server recipe. In this recipe, you share a folder (C:\Foo) on the file server. You created this folder previously. Then, you create a file in the C:\Foo folder you just shared and set the ACL for the files to be the same as for the share. You use the...