How to Create a Hidden SMB Share in Windows Server

What is a Hidden SMB Share?

In Windows Server environments, the Server Message Block (SMB) protocol is used to share folders across the network. When a user opens File Explorer and navigates to your server’s UNC path (e.g., \\FileServer01), Windows automatically broadcasts a list of every shared folder available on that server.

However, there are times when system administrators need to share a folder for automated scripts, deployment tools, or highly restricted executive data without advertising its existence to the entire company. By appending a simple character to the share name, you can create a “hidden” share. It remains fully accessible over the network, but it will not appear in any directory listings. Users must know the exact, specific path to access it.

How to Create the Hidden Share

Creating a hidden share follows the exact same process as creating a normal share, with one minor syntactical difference.

Using the GUI

1. Log into your Windows Server and open File Explorer.
2. Navigate to the folder you want to share, right-click it, and select Properties.
3. Navigate to the Sharing tab and click Advanced Sharing…
4. Check the box that says Share this folder.
5. The Secret: In the “Share name” field, type your desired name and append a dollar sign ($) to the very end of it. For example, name it IT-Deployments$.
6. Click Permissions to restrict access to the specific users who need it, then click OK.

Using PowerShell

You can achieve the exact same result instantly using PowerShell. Open an elevated PowerShell window and use the New-SmbShare cmdlet, ensuring the -Name parameter ends with a dollar sign:

New-SmbShare -Name "IT-Deployments$" -Path "C:\DeploymentFiles" -FullAccess "Domain Admins"

How to Access the Hidden Share

To verify the share is truly hidden, open File Explorer on another computer on the network and navigate to the root of the server: \\FileServer01. You will see normal shares, but your new IT-Deployments$ share will be completely invisible.

To access it, you must type the exact, explicit path into the File Explorer address bar or the Run dialog (Win + R):

\\FileServer01\IT-Deployments$

Press Enter, and the folder will open. This simple trick provides an excellent layer of “security through obscurity” for administrative shares.