Windows 10: Guest access disabled - Why is it necessary to enable to access SMBv2 NAS?

Hello.

Since this is the files, folders and storage forum, I hope someone can help me.

As most of you know, since windows 10 build 1709, "Guest Access in SMBv2" is disabled by default. When this happened the only way I had to regain network access to my NAS was by modifying the policy "Computer configuration\Admin. Templates\Network\Lanman Workstation\Enable insecure guest logons". It has been working until I completed the upgrade to windows 10 2004 build.

Couldn't access to the NAS even with the mentioned setting. As a workaround, I was able to edit the registry

"Computer\HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters\allowinsecureguestacess".

So now I have access again.

Nevertheless there are some things I don't understand:


- even when I installed smbv1 windows features I couln't connect to the NAS, a linux client could, using SMB1

- removed SMB1. Checked with Wireshark and my windows tried to connect via SMBv2 protocol. So, why would I need "Guest access" if my NAs only admits authenticated users?

- Before the registry workaround, I configured SMBv2 access to a linux server and my windows could connect after being asked for user/password.


So, why my windows rejected the connection to the NAS, without even asking for credentials?


Thanks and regards.

Dave

:)

 

I cannot access a NAS as a guest user

the problem is that the NAS will be hard to access, for security reasons so it will be difficult to give access to indiviual computers and I need to make the guest account work with limited permissions, for people who need to access the NAS short term.
This guest account is a feature of the NAS, but for some reason it is disabled for windows, I'm just looking for a way to get permission to use a guest account.

 

I cannot access a NAS as a guest user

Okay I read post, but the problem is that I need to access a public accessible folder on a NAS, not making one on my computer. The NAS is set up, to allow Guest accounts to access the folders.

I wont be able to make an account for all the users that will need access, they are only allow to read only access anyways.

If I make a user account with no password, the people who will access the NAS, will have access to more stuff on the NAS, that I can not disable, so the builtin Guest "account" are the only option I have as I see it now. At least if I can make it work on
windows computers.

Larryh272 thank you for trying to help if you work for Microsoft you should ask them for a raise... If not then just ask them to pay you

 

How to remove Guest account?


Try these steps and you should be able to disable the guest account:

1. Press the WIN + X keys and select "Command Prompt (Admin)" from the Quick Access menu.
2. At the Command Prompt, run this command:

Code: