Dear Conor Hankinson,
Starting with Windows 11 24H2, Microsoft has introduced enhanced security defaults for SMB (Server Message Block) protocol to better protect users from known vulnerabilities. These changes include:
SMB signing enforcement by default
Blocking insecure guest logons
Disabling SMBv1 unless explicitly re-enabled
These updates improve security but may impact compatibility with older systems like Windows 2000, which rely on SMBv1 and unauthenticated access.
Here are recommended Steps to Restore Connectivity:
- Re-enable SMBv1 (if required) Confirm that SMB 1.0/CIFS File Sharing Support is enabled under Settings > Optional Features > Add an optional feature Alternatively, use PowerShell:
- powershell
Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol
- powershell
- Allow Insecure Guest Logons Open Group Policy Editor (gpedit.msc) Navigate to:
Computer Configuration > Administrative Templates > Network > Lanman Workstation
Set Enable insecure guest logons to Enabled - Disable SMB Signing Requirement (if applicable) In Group Policy:
Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options
Set Microsoft network client: Digitally sign communications (always) to Disabled - Registry Key Review Ensure the following registry keys are correctly configured:
- reg
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters]
- reg
"AllowInsecureGuestAuth"=dword:00000001 ```
Security Considerations: Please note that enabling SMBv1 and guest access introduces known security risks. We recommend applying these changes only in trusted environments and considering long-term migration strategies away from legacy systems.
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
Best regards,
Harry Phan