Windows SMB Insecure Guest Access
Summary
Windows SMB sharing with S1 using the workgroup model is not supported in the field. It may be used for internal testing purposes only. Default behavior in Windows 10 and Windows Server 2019 is to disallow insecure guest access to an unprotected SMB share. Allow insecure guest authentication must be changed on the SMB client from the default value of disabled to enabled to work with S1 SMB shares in workgroup mode. This is a known, documented, Microsoft behavior.
Symptom
Unable to browse SMB shares created on an S1 NAS server from a Windows machine.
Solution A
- Open local group policy editor on your Windows SMB client: Start > Run > gpedit.msc
- Navigate to Computer Configuration > Administrative Templates > Network > Lanman Workstation
- Change the value for “Enable insecure guest logons” from “Not configured” to “Enabled”; see Figure 1 below for example.
Figure 1: Enable insecure guest logins
Solution B
Execute the attached win2019_lanman_fix.reg file to change the corresponding registry value to enable insecure guest access.
Test Solution
You should now be able to browse and access SMB shares created on the S1 NAS server.
No Comments