Share via

Windows 11 24H2 – Cannot access SMB share in Workgroup after update (credentials always rejected)

Atena Kiarostami 25 Reputation points
2025-09-11T21:58:45.1166667+00:00

Environment:

  • Workgroup (no Active Directory)
  • Client: Windows 11 24H2 (build …)
  • Server (peer PC hosting the share): Windows 11 24H2 (build …)
  • Recent updates installed: KB5063878, KB505440

Issue:

Since updating to 24H2, our clients can’t access \SERVER\Share anymore.

Windows always prompts for credentials and rejects them (“The user name or password is incorrect”).

Before the update, access worked.

What we tried:

  • Disabled SMB signing (Client/Server “digitally sign communications – always/if agrees”)
  • Set “Network access: sharing and security model for local accounts” = Classic (ForceGuest=0)
  • Enabled LocalAccountTokenFilterPolicy=1
  • LmCompatibilityLevel=3 (NTLMv2)
  • Tested with IP and with SERVERNAME, cleared credential cache, firewall SMB-In allowed
  • Services running: LanmanServer, Workstation, Function Discovery Provider Host/Resource Publication

Diagnostics:

  • Test-NetConnection SERVER -Port 445 → name resolution failed; with IP works
  • net use \<IP>\Share /user:.\shareuser *
  • Event Viewer (server) Event ID 4625 at the same time → Status/SubStatus: 0x…

Repro steps:

  1. Clean 24H2 images (client+server) in workgroup.
  2. Create local user “shareuser” on server, share C:\Data\Share and grant Share+NTFS.
  3. From client, map \SERVER\Share (or \<IP>\Share) with SERVER\shareuser credentials.
  4. Observe repeated credential prompts/rejection.

Expected:

Successful authentication with local user in Workgroup.

Actual:

Credentials rejected after 24H2. Looks like SMB/NTLM hardening or guest/classic model regression.

Please advise or confirm if this is a known issue. Happy to provide Feedback Hub logs and ETW traces.

Microsoft Security | Microsoft Authenticator

2 answers

Sort by: Most helpful
  1. Carlos V. Gonzalez 15 Reputation points
    2025-10-06T13:32:12.4566667+00:00

    Very conveniently Microsoft changed how Windows Samba client behaves connecting to Samba Servers in the last update for Windows 10 and on Windows 11

    I have a Debian Samba Server share that Windows 10 stop working to, after last windows 10 update, my Android device however had no problems connecting to server, the culprit seems to be:

    EnableSecuritySignature $true

    that is now default on Windows 10 Samba client, to change it, open power shell with administrator priviedges and:

    Set-SmbClientConfiguration -EnableSecuritySignature $false

    that should be enough. Restart Windows...


  2. Deleted

    This answer has been deleted due to a violation of our Code of Conduct. The answer was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.


    Comments have been turned off. Learn more

Your answer