Fix shared folders in 24H2Recently, Microsoft started pushing out Windows 11 24H2 to darn near everyone.

Ideally, this is because it’s now stable…

Unfortunately, many users are having problems accessing shared folders on their local network after upgrading to 24H2.

Luckily, once we understand WHY this is happening, it’s pretty easy to fix!

Why network shares stopped working in 24H2

It’s pretty simple: 24H2 now requires that Samba / SMB shared folders on your local network have a username and password. The era of free-for-all wide-open shared folders is over.

Straight from the horse’s mouth:

This is part of a campaign to improve the security of Windows and Windows Server for the modern landscape. […]

You’ll recall the Windows 10 and Windows Server 2019 campaigns against SMB1 and guest auth fallback.

Most sources on the net tell you to simply re-enable SMB v1, but that’s a bad idea for a number of reasons:

Do not disable SMB signing in Windows or use SMB1 to work around this behavior (SMB1 supports signing but does not enforce it). An SMB device that does not support signing allows interception and relay attacks from malicious parties.

Well, okay then.

Only trouble is, if you’re using Windows network shares and you have a slew of puters, you’ll have to do this:

  1. Create a user/password on Puter #1
  2. Go to every other puter on the network and try to connect to Puter #1’s shared folder
  3. Enter user/pass that you create on Puter #1
  4. Now just repeat Steps 1-3 for every other machine on your network

SUPER-easy, right??

And what’s worse, you probably don’t care about the security of Windows shares on your LOCAL network. Most likely, you have a router acting as a firewall – and it’s not totally useless.

So, while MS would love for you to buy Windows Server and create a domain and go Full Corporate – thereby spending lots of money – you’d rather just stick with “insecure” network shares on your local network. Duh!

How to make shared folders work again in 24H2

No problemo!

First, I’m going to assume that you’re using “standard” NOT-password protected Public folders on your Windows shares, like so:

Advanced Sharing Settings
Alrighty. That gets you almost all the way there…

Note that most likely, you can still access the share just fine if you use the IP addy of the puter instead of the machine name. But that’s kind of messy (especially if the machines on your LAN don’t have static IPs) so we’ll fix it good.

You just need to turn off “signing” of network shares, which was added in 24H2, and ensure that insecure guest logins are allowed. The way to do that is:

  1. Click the Start/Windows button
  2. Type: Powershell
  3. Click: Run as Administrator
  4. Now paste in the following 3 commands:

 

Set-SmbClientConfiguration -EnableInsecureGuestLogons $true -Force
Set-SmbClientConfiguration -RequireSecuritySignature $false -Force
Set-SmbServerConfiguration -RequireSecuritySignature $false -Force

You might need to reboot, but I didn’t on 3 different puters.

Aaand, you’re done.

What if I STILL can’t access my network shares?

Oh, well, yeah… There seems to be a ‘Little Bug’ in 24H2 that MS knows about, but of course they aren’t fixing it because they don’t want you to do what I just described above.

It appears that if IPv6 is enabled on your network adapter, some windows shares will be broken. If you’re using IPv4 on your LAN (you very likely are), then try disabling IPv6 like so:

  1. Click the Start/Windows button
  2. Type: view network
  3. Click: View network connections
  4. Find your active Ethernet or WiFi connection icon, right-click it, and click Properties
  5. Scroll down until you find Internet Protocol Version 6, and UNcheck the box
  6. Click OK

Ethernet Properties

Now try again, and your network share should work fine. Don’t ask me, man… I just use Microsoft software – I don’t write it.

Bonus Tip: One computer still asks for a password!

This is an oldie-but-goodie. Go to the inaccessible puter, and do this:

  1. Right-click the Start/Windows button and choose Run
  2. Type: lusrmgr.msc
  3. Click OK to run it
  4. Click Users in the left column
  5. In the middle column, right-click Guest and choose Set Password…
  6. Click the Proceed button
  7. Leave both New password fields blank, and click OK

Now go to the other puter and try to access the inaccessible machine’s shared folder(s) again.

Normally, the Guest password IS blank, but for reasons known only to the coding samurai in Redmond, this useless action fixes the glitch.

Ta-DA! Finally, note that you may have to redo that step after certain Windows updates.

Again, don’t ask me, man! It’s Windows networking… 🙂

Need help? Hire me!
Get Scottie Stuff!