Enter Network Credentials (Almost) Every Time I Access a Network Share (Nas Smb)
Windows 10 Prompts Me for Password When I Want to Access a Password-Less Network Share. the Share Is on a Nas (Smb Protocol). I Can Access the Share from Other...
Windows 10 prompts me for password when I want to access a password-less network share. The share is on a NAS (SMB protocol). I can access the share from other OS/systems without any password just fine. I can type just anything on the prompt and it will accept.
Additional error displayed: A specified logon session does not exist. It may already have been terminated.
Things I've tried:
- Disabling password protected sharing on Network and Sharing Center -> Advanced sharing settings -> All Networks -> Password protected sharing -> Turn off password protected sharing.
- Saving a credential on Credential Manager -> Windows Credentials -> Internet or network address = Share name.
Here's smb.conf from the NAS as requested:
[global]
dos charset = CP437
unix charset = UTF-8
display charset = UTF-8
netbios name = mynas
server string = "LinkStation"
socket options = TCP_NODELAY
max xmit = 65536
use sendfile = yes
os level = 1
wins server =
workgroup = WORKGROUP
security = user
auth methods = guest sam
passdb backend = tdbsam:/etc/samba/smbpasswd.tdb
encrypt passwords = Yes
passwd program = /usr/bin/passwd %u
passwd chat = *New*password* %n\n *Retype*new*password* %n\n *passwd:*all*authentication*tokens*updated*successfully*
unix password sync = yes
unix extensions = no
guest account = nobody
null passwords = yes
guest only = no
password level = 14
map to guest = Bad User
veto files = /.AppleDesktop/Network Trash Folder/TheVolumeSettingsFolder/.AppleDouble/.AppleDB/.
delete veto files = yes
deadtime = 15
invalid users = mail, deamon
admin users = root
username map = /etc/samba/smbusers
log level = 1
max log size = 0
lock directory = /etc/samba/lock
dos filetimes = Yes
dos filetime resolution = No
map archive = Yes
map hidden = No
map system = No
dns proxy = No
show add printer wizard = No
host msdfs = no
disable spoolss = yes
wide links = yes
lanman auth = yes
printcap name = /etc/printcap
load printers =
And here's smbusers
# Unix_name = SMB_name1 SMB_name2 ...
root = administrator
nobody = guest pcguest smbguest
1 Answer
Since Windows 10 version 1709 and forward SMB2 and SMB3 disables guest access by default for it as a client connecting to an SMB server that forces guest or an unauthenticated credential.
Quoted and referenced below are portions of a Microsoft post that's relevant to your issue. I encourage you to read through its entire contents for thoroughness still.
I've also posted below some "potential solutions" for an answer even though for security reasons Microsoft says to not do this. You should ensure your network is locked down to prevent man-in-middle attacks for related systems.
Must Read
Symptoms
Starting in Windows 10, version 1709 and Windows Server 2019, SMB2 and SMB3 clients no longer allow the following actions by default:
- Guest account access to a remote server.
- Fall back to the Guest account after invalid credentials are provided.
SMB2 and SMB3 has the following behavior in these versions of Windows:
- Windows 10 Enterprise and Windows 10 Education no longer allow a user to connect to a remote share by using guest credentials by default, even if the remote server requests guest credentials.
Note: This Windows 10 behavior occurs in Windows 10 1709, Windows 10 1803, Windows 10 1903, Windows 10 1909 as well as Windows 10 2004, Windows 10 20H2, & Windows 10 21H1 as long as KB5003173 is installed.
If you try to connect to devices that request credentials of a guest instead of appropriate authenticated principals, you may receive error messages.
Also, if a remote server tries to force you to use guest access, or if an administrator enables guest access, the following entries are logged in the SMB Client event log:
Log Name: Microsoft-Windows-SmbClient/Security Source: Microsoft-Windows-SMBClient Date: Date/Time Event ID: 31017 Task Category: None Level: Error Keywords: (128) User: NETWORK SERVICE Computer: ServerName.contoso.com Description: Rejected an insecure guest logon. User name: Ned Server name: ServerName
David Miller brings 15 years of experience in global economics, personal finance strategy, and market dynamics. He specializes in turning complex economic trends into actionable insights for everyday readers.
