End-to-end encryption of SMB sessions was introduced in version 3 of the Server Message Block protocol (SMBv3). Windows allows you to configure encryption for all shares or just specific shares.
One disadvantage is that the communication will only be encrypted if both parties are running Windows 8 or Windows Server 2012.
To verify the encryption status you can use the following PowerShell command:
Get-SmbServerConfiguration | fl EncryptData
To enable the encryption of all SMBv3 sessions you can use the following PowerShell script:
Set-SmbServerConfiguration -EncryptData $true -Confirm:$false
