<div>
Morning<br />
<br />
<a href="https://support.microsoft.com/en-gb/help/2696547/how-to-detect-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and" rel="ugc">https://support.microsoft.com/en-gb/help/2696547/how-to-detect-enable-and-disable-smbv1-smbv2-and-smbv3-in-windows-and</a><br />
<br />
Full guide there :-) <br />
<br />
If you need further assistance please post back and I'll take another crack at it for you. This should be sufficient.
</div>


<div>
SMBv 3 is already enabled, what i need is to enable SMBv3.1.1 encryption in latest OSs i.e. Windows Server 2016 etc. using GPO.
</div>


<div>
OK, you'll need to probably get some sort of ADMT for group policy in order to get the option, either that or upgrade your domain functional level to 2016 &nbsp;in order to get the option in group policy.
</div>


<div>
Hi Alex,<br />
Can we revert the domain functional level back to current level later.
</div>


<div>
Did you pick the wrong thread?
</div>


<div>
I suspect that the OP was responding to Alex Green's comment where he stated that the OP may need to raise the functional level to get GPO options.<br />
<br />
The comment was not accurate, but I can see why the OP would ask what they did given the plethora of advice here. &nbsp;:/
</div>


<div>
@Afinity E., why did your feedback stop?<br />
I consider this solved already. Cliff pointed to server manager and I gave you the commands to tune it to your liking and to verify it.<br />
Cliff should add how he would fulfill backwards compatibility in server manager if possible.
</div>


<div>
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.<br />
<br />
I have recommended this question be closed as follows:<br />
<br />
Split: <br />
-- 'McKnife' (<a href="https:#a42678381" rel="ugc">https:#a42678381</a>)<br />
-- 'Cliff Galiher' (<a href="https:#a42678315" rel="ugc">https:#a42678315</a>)<br />
<br />
<br />
If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.<br />
<br />
seth2740<br />
Experts-Exchange Cleanup Volunteer
</div>


<div>
<div class="content wysiwyg-content">
How can I enable SMBv3.1.1 encryption in latest OSs i.e. Windows Server 2016 etc. Wherever possible having backward compatibility with older OSs supporting only SMBv2 using windows group policy.
</div>
</div>


How can I enable SMBv3.1.1 encryption in latest OSs i.e. Windows Server 2016 etc. Wherever possible having backward compatibility with older OSs supporting only SMBv2 using windows group policy.

enable SMBv3.1.1 encryption

Active Directory (AD) is a Microsoft brand for identity-related capabilities. In the on-premises world, Windows Server AD provides a set of identity capabilities and services, and is hugely popular (88% of Fortune 1000 and 95% of enterprises use AD). This topic includes all things Active Directory including DNS, Group Policy, DFS, troubleshooting, ADFS, and all other topics under the Microsoft AD and identity umbrella.

Active Directory

Windows 10 is a personal computer operating system featuring the "universal application architecture" (UAP); apps can be designed to run across multiple devices with nearly identical code, including PCs, tablets, smartphones, embedded systems, Xbox One, Surface Hub and HoloLens. Windows 10 also includes a virtual desktop system, a window and desktop management feature called Task View, the Microsoft Edge web browser, support for fingerprint and face recognition login, voice-based search (Cortana), new security features for enterprise environments, and DirectX 12 and WDDM 2.0 to improve the operating system's graphics capabilities for games.

Windows 10

Microsoft Azure is a cloud computing platform and infrastructure for building, deploying and managing applications and services through datacenters. It provides both platform-as-a-service (PaaS) and infrastructure-as-a-service (IaaS) services and supports many different programming languages, tools and frameworks, including both Microsoft-specific and third-party software and systems. Cloud Services is a PaaS environment and can be used to create scalable applications and services; there are specific software development kits (SDKs) provided by Microsoft for Python, Java, Node.js and .NET. Azure also has file and storage services, data management, analytics and DNS services.

Azure

Windows Server 2016 is the successor to Windows Server 2012 R2. Built upon the same core code as Windows 10, Windows Server 2016 brings enhancements in security, servicing, and connectivity. A particular focus on this release was hybrid-cloud scenarios, and has close ties to Azure and other Microsoft cloud initiatives. This does not detract from the many improvements that are available for on-premises-only deployments

Windows Server 2016 comes in Datacenter, Standard, and Essentials editions, and for servicing, has adopted windows 10's cumulative model. The new nano-server install is designed to be remotely managed and is designed to be kept current through continuous feature updates. The full GUI install operates similarly to windows 10's "Long Term Servicing Branch" (LTSB) model with cumulative security updates.

Windows Server 2016 has also shifted from a per-processor-and-CAL licensing model to a per-core-and CAL licensing model. This brings Windows Server's licensing more in line with Microsoft's other products and makes hybrid-cloud license planning easier as well.