>

List active SMB connections and dialects on Windows

Show currently established SMB file-sharing connections and the negotiated protocol version of each with Get-SmbConnection.

WindowsnetworksmbpowershellLow risk
Run Get-SmbConnection to list each active SMB share connection and its negotiated Dialect (e.g. 3.1.1).

01Command

Command
$ Get-SmbConnection | Format-Table ServerName,ShareName,Dialect,NumOpens -AutoSize

02What it does

Dialect is the interesting column: a 2.0.2 or older value against a NAS means the client fell back to an old protocol, and anything negotiating SMB 1 (sometimes shown when scanning with Get-SmbServerNetworkInterface on servers) is the red flag behind WannaCry-era exploits. Unlike net use, which lists mapped drive letters, Get-SmbConnection shows connections without drive letters too. Its counterpart Get-SmbSession does the same from the server side.

03Risk

RiskLow risk
RequirementsAt least one active SMB connection

04Undo

✓No undo needed — this command does not change persistent state.

05Sources

  • Get-SmbConnection | Microsoft Learn
    Microsoft · vendor-doc · 2026-09-17
    Evidence: Microsoft documents Get-SmbConnection as retrieving established SMB connections between the SMB client and servers, including the negotiated Dialect.

Last verified: 2026-09-17 · Category: Network

06Related solutions

Test a TCP port connection on Windows with Test-NetConnection
Windowsnetworktroubleshootingpowershell

A built-in PowerShell one-liner that answers 'is port 5432/3389/443 actually open through this network?' — no telnet client needed.

Low risk ✓ 2026-09-17
List listening TCP ports and owning processes with Get-NetTCPConnection
Windowsnetworkportspowershell

The PowerShell-native replacement for netstat: filter connections by state, port, or process and pipe results instead of parsing text.

Low risk ✓ 2026-09-17
Query DNS records with Resolve-DnsName in PowerShell
WindowsnetworkDNSpowershell

The modern, scriptable replacement for nslookup: ask for exact record types, hit specific DNS servers, and see TTLs as objects.

Low risk ✓ 2026-09-17