Here are some good troubleshooting steps, shamelessly copied from ServerFault:

  1. Maybe your Windows host is prepending your username with the wrong domain name. From the Windows machine, try to login using localhost\simon as the username
  2. Issue sudo pdbedit -L (must run as root) and check if user simon is listed. If so, set a trivial password (you can change it later) using smbpasswd simon
  3. If user simon is not listed, try to recreate it issuing smbpasswd -a simon
  4. If it does not work, delete the passwd file (it is named passwd.tdb; for reference, it is found under /var/lib/samba/private/). Then, recreate your user issuing smbpasswd -a simon
  5. If it still not working, try to use the root account issuing smbpasswd -a root and check if you can login using the root user. Note: this is only a try. After having done with it, you must delete root's entry issuing smbpasswd -x root
  6. Your last resort is to increase the verbosity of logging and see if you can find clues there. For authentication attempts, edit or add the following line on your smb.conf: log level = 2 winbind:5, check the logs with something like tail -f /var/log/samba/log* and try to login.

Hope some of it helps.

Answer from Artur Meinild on askubuntu.com
🌐
Microsoft Learn
learn.microsoft.com › en-us › troubleshoot › windows-client › networking › access-denied-access-smb-file-share
Access Denied when you access Server Message Block (SMB) file share - Windows Client | Microsoft Learn
Resolves an issue in which you can't access a shared folder through SMB2 protocol. This issue occurs in Windows 8.1, Windows Server 2012 R2, Windows 8, Windows Server 2012, Windows 7, Windows Server 2008 R2, Windows Vista, and Windows Server 2008.
Top answer
1 of 2
4

Here are some good troubleshooting steps, shamelessly copied from ServerFault:

  1. Maybe your Windows host is prepending your username with the wrong domain name. From the Windows machine, try to login using localhost\simon as the username
  2. Issue sudo pdbedit -L (must run as root) and check if user simon is listed. If so, set a trivial password (you can change it later) using smbpasswd simon
  3. If user simon is not listed, try to recreate it issuing smbpasswd -a simon
  4. If it does not work, delete the passwd file (it is named passwd.tdb; for reference, it is found under /var/lib/samba/private/). Then, recreate your user issuing smbpasswd -a simon
  5. If it still not working, try to use the root account issuing smbpasswd -a root and check if you can login using the root user. Note: this is only a try. After having done with it, you must delete root's entry issuing smbpasswd -x root
  6. Your last resort is to increase the verbosity of logging and see if you can find clues there. For authentication attempts, edit or add the following line on your smb.conf: log level = 2 winbind:5, check the logs with something like tail -f /var/log/samba/log* and try to login.

Hope some of it helps.

2 of 2
3

I had the same issue and finale found a solution as mentioned here.

AppArmor and Samba may interfere each other after updates or not being properly configured. The suggested solution is to activate complaint-mode for AppArmor's smbd:

sudo aa-complain /etc/apparmor.d/usr.sbin.smbd

However you could also add Site-specific additions in /etc/apparmor.d/local/usr.sbin.smbd to get access.

Discussions

linux - Samba access is denied in windows - Unix & Linux Stack Exchange
I want to access linux (fedora 25 in virtual box), there is two issues: Configure with anonymous access, but windows still asks account and password to access linux by samba. Configure with account More on unix.stackexchange.com
🌐 unix.stackexchange.com
rhel - Can not access Samba server from Windows 11 after server reinstall - Stack Overflow
I recently reinstalled my Alma Linux server, before the reinstall I had a samba share working as intended between my two machines. Unfortunately after the reinstall I can't seem to get them to want... More on stackoverflow.com
🌐 stackoverflow.com
Windows 11 SMB Client cannot connect to SMB share - error 53 on `net view`
Machine in question: Windows 11 21H2 22000.832 OSes on other devices that can successfully connect to the share: MacOS Ventura built-in SMB; iOS 16.5 built-in SMB; ES File Explorer on iOS, Windows 10; etc. Share Host: TrueNAS-13.0 with domain… More on learn.microsoft.com
🌐 learn.microsoft.com
16
5
Samba Share inaccessible from Windows 11
I am trying to create a windows 11 VM in gnome boxes that can access drives. For some reason passing through any drive to the VM doesn’t work, the windows 11 recognizes a drive was plugged in but gives an error saying it is unreadable. This is even though the drive is NTFS or exFat formatted. More on forums.rockylinux.org
🌐 forums.rockylinux.org
19
0
August 23, 2025
Top answer
1 of 7
14

To access the samba share, please pay attention to:

  1. You had to create a system user with the same username. In this case, please issue the following command: useradd -s /sbin/nologin benjamin
  2. If you are using a SELINUX-enabled system (eg: CentOS), try to temporarily disable it issuing setenforce 0

EDIT: as the problem persists, try the following:

  1. maybe your Windows host is prepending your username with the wrong domain name. From the Windows machine, try to login using localhost\benjamin as the username
  2. issue pdbedit -L and check if user benjamin is listed. If so, set a trivial password (you can change it later) using smbpasswd benjamin
  3. if user benjamin is not listed, try to recreate it issuing smbpasswd -a benjamin
  4. if it does not work, delete the passwd file (it is named passwd.tdb; for reference, in a CentOS 6.x system it is found under /var/lib/samba/private/). Then, recreate your user issuing smbpasswd -a benjamin
  5. if it still not working, try to use the root account issuing smbpasswd -a root and check if you can login using the root user. Note: this is only a try. After having done with it, you must delete root's entry issuing smbpasswd -x root
  6. Your last resort is to increase the verbosity of logging and see if you can find clues there. For authentication attempts, edit or add the following line on your smb.conf log level = 2 winbind:5, check the logs with something like tail -f /var/log/samba/log* and try to login.
2 of 7
12

It is possible you need to add the user in question to your smb service in linux

sudo smbpasswd -a myuser
Top answer
1 of 2
1

For Fedora 25, I am not familiar with fedora version numbers but I am with RHEL/Centos 7.x If you have selinux enabled by default, you might try as root setenforce 0 to temporarily put selinux into permissive mode until next reboot, see if this allows samba access to work. If so then it's a selinux problem, and in RHEL/Centos there is etc/samba/smb.conf.example which explains the samba related selinux commands needed to allow samba shares to work with selinux set to enforcing.

For your version of fedora, I would work off the /etc/samba/smb.conf.example.

for reference here is my working smb.conf from an older version of samba showing what i believe is the minimum required to get it to work. If you go too restrictive with settings then you can prevent a successful connection so sometimes it's best to not specify which generally means allow for all.

In your [myshare] take out allow hosts and valid users. Once samba working then consider adding restrictive measures like these as necessary.

[global]
#       min protocol = SMB1 needed for winxp
        min protocol = SMB1
#       max protocol SMB2 needed to work with win10, unspecified for this older version of samba is smb1.
        max protocol = SMB2 
        security = user
        passdb backend = tdbsam
#       map to guest = never prevents popup option, bad user allows popup in windows
        map to guest = Bad User

[data]
    path = /data
    read only = No
#   guest ok = no
#   create mask = 660
#   directory mask = 770

with guest ok = no, and map to guest bad user, will allow popup in windows giving anyone a chance to enter correct linux username and pw. map to guest never prevents popup, meaning the username of the windows user has to be the same as a valid local user in linux, per security=user. You likely do not need min/max protocol specified, I do in samba version 3.6. I don't know what verion of samba u have in fedora 25, if it's samba 3.x then try specifying the min/max protocol.

don't forget to do smbpasswd -a <username on your linux system.

2 of 2
0

I have a system that allows WinXP and Win7 to access samba as guests. A few entries that may help are:

[global]
security = user
null passwords = yes
map to guest = Bad Password
guest ok = Yes

I am using wide open shares on a trusted lan.

🌐
Linux Mint Forums
forums.linuxmint.com › board index › main edition support › networking
Windows 10/11 Samba file sharing - access denied [sort of solved but observations appreciated] - Linux Mint Forums
September 9, 2025 - I've followed the instructions from GenericTechSupport I created a new user on Linux (user = winaccess) I've configured samba in Nano [global] workgroup = WORKGROUP client min protocol = SMB3 client max protocol = SMB3 client smb encrypt = required client signing = required server min protocol = SMB3 server max protocol = SMB3 ntlm auth = ntlmv2-only I've created a shared folder (called "shared-files") and given read & write permissions [shared-files] Comment = shared files on mint path = /srv/sambashare/shared-files read only = no browsable = yes valid users = winaccess I've limited permissions sudo chown winaccess: /srv/sambashare/shared-files restarted the samba ... Then from windows 11, I can see the Linux machine directly from file explorer but if I click it, permission is denied.
🌐
Super User
superuser.com › questions › 1857462 › linux-samba-denied-connection-from-windows-11-client
Linux SAMBA Denied Connection from Windows 11 client - Super User
iptables -A INPUT -m state --state NEW -p udp --dport 137 -j ACCEPT iptables -A INPUT -m state --state NEW -p udp --dport 138 -j ACCEPT iptables -A INPUT -m state --state NEW -p tcp --dport 139 -j ACCEPT iptables -A INPUT -m state --state NEW -p tcp --dport 445 -j ACCEPT docker run -d --network host --privileged -v "/data/data:/data" --name samba crazymax/samba
Find elsewhere
🌐
Linux Mint Forums
forums.linuxmint.com › board index › main edition support › networking
SAMBA permission denied from Windows - Linux Mint Forums
Last edited by LockBot on Wed Dec 28, 2022 7:16 am, edited 1 time in total. Reason: Topic automatically closed 6 months after creation. New replies are no longer allowed. ... Have you created the user 'bpenven' as a Unix and Samba user ? Lets take your 'Jellyfin' share, line by line, ignoring the 'path': force user = bpenven This means that every authenticated user that connects becomes 'bpenven' guest ok = Yes This means that unknown, unauthenticated users can access ...
🌐
Stack Overflow
stackoverflow.com › questions › 75861592 › can-not-access-samba-server-from-windows-11-after-server-reinstall
rhel - Can not access Samba server from Windows 11 after server reinstall - Stack Overflow
I setup this share from RHEL cockpit, but I'm comfortable with cli if its required. Note if I check windows ACLs below, it removes valid users. I'm sure I didn't use that feature last time. ... Load smb config files from /etc/samba/smb.conf Loaded services file OK.
🌐
Super User
superuser.com › questions › 504484 › access-denied-when-mapping-drive-from-windows-7-to-samba-share
debian - Access Denied when Mapping Drive from Windows 7 to Samba Share - Super User
November 12, 2012 - I had to 'chmod 777 /samba' which really bothers me, because now I'm worried my stuff is wide open. ... Mnh, you can always force a uid+gid in the mount options and have directories 0770 and files 0660 (find -exec chmod works nicely there) ... Find the answer to your question by asking. Ask question ... See similar questions with these tags. ... PSE Advent Calendar 2025 (Day 4): Ring Bethlehem, the day begun! Is Codepage 1252 guaranteed to be available on all Windows systems?
🌐
Samba
lists.samba.org › archive › samba › 2018-September › 218348.html
[Samba] [SOLVED] Samba 4: 'Access denied' error when accessing user profile during logon
September 20, 2018 - > > If user profile matching OS doesn't yet exist, Windows attempts to > create one under '[profiles]'. I.e., for user 'username' > Windows 7 will > attempt to create [profiledir]\username.V2 > > If it can't create that directory, 'Access denied' is written > to system > event log and a temporary ...
🌐
Seven Forums
sevenforums.com › network-sharing › 296034-keep-getting-access-denied-when-trying-connect-samba-share.html
Keep getting access denied when trying to connect to Samba share - Windows 7 Help Forums
July 2, 2013 - I have disabled password sharing in Win7, and done the Security policy trick. Any help would be appreciated. Try using the settings for the Local Security Policy in the link below on the Windows 7 machine, these settings often work to allow access to certain Samba servers and older Windows servers.
🌐
Rocky Linux Forum
forums.rockylinux.org › rocky linux help & support
Samba Share inaccessible from Windows 11 - Rocky Linux Help & Support - Rocky Linux Forum
August 23, 2025 - I am trying to create a windows 11 VM in gnome boxes that can access drives. For some reason passing through any drive to the VM doesn’t work, the windows 11 recognizes a drive was plugged in but gives an error saying it is unreadable. This is even though the drive is NTFS or exFat formatted.
🌐
Reddit
reddit.com › r/techsupport › i'm unable to access samba shares from a windows 11 pro computer.
r/techsupport on Reddit: I'm unable to access Samba shares from a Windows 11 Pro computer.
October 27, 2025 -

On Manjaro Linux, I set up some folder shares to try to make a media server. I can access those shares from another computer running Ubuntu just fine. A PC with a Windows Pro license isn't seeing either Linux computer. Is there some service that needs to be running on the Windows computers for this to work? I asked on the Manjaro side and didn't get anywhere.

Edit: I eventually came across this fix in this thread. I applied it to the Windows Pro boxes.

Machina10Reputation points

Oct 2, 2025, 6:49 PM

I lost access to the shares on my WD NAS after the KB5065426 update. I followed the usual advice to uninstall the update, but I failed to block its reinstallation, and now Win 11 will not allow me to uninstall it. So, here is what I did to regain access to my NAS shares, while leaving the KB5065426 update installed. (Leaving it installed is presumably better for security anyway.)

Step 1: Insure that the NAS utilizes SMB2 or SMB3, and not SMB1. Do this by checking the settings on the NAS or its documentation.

Step 2: Run powershell as an administrator and enter the command

Copy

Get -SMBClientConfiguration

Look at the results to ensure that "EnableInsecureGuestLogons" is set to "$true" and that "RequireSecuritySignature" is set to "$false". If needed, change these values, by entering the command

Copy

 Set -SMBClientConfiguration -EnableInsecureGuestLogons $true 

and the command

Copy

Set -SMBClientConfiguration -RequireSecuritySignature $false

Restart the machine if any settings were changed by powershell.

Step 3: If you don't know the exact name by which your NAS is known to your machine, find it by looking under "Network" in Windows Explorer. Then, in Explorer right click on "This PC" to choose "Add a network location". Then click on "Choose a custom network location" to bring up a dialog where you can enter the exact name and location of the share you want to access, in the form

\exact name of your NAS\exact name of the share

Then, click "browse". That should bring up a system response in which it acknowledges that it has found the share. Assign a drive letter to it. You should now have stable access to the share, using the assigned drive letter.

At least this worked for me on my personal machine. On my corporate laptop it did not work, since my organization does not allow me to choose a custom network location outside of the corporate network, and my NAS is not in the corporate network. So, for access to my NAS on my corporate machine, I have to set up cloud access to the NAS and get access to the share by browsing from the cloud.

Yes, this is all annoying and time-consuming. I'm grateful to others on this thread for their help. Probably my strategy will not work for everyone, since there are lots of variables in play here. MS should not have released an update that would cause so much trouble with networking.

🌐
TrueNAS Community
truenas.com › forums › archives › general help › general
SMB Share Access Denied on One Computer Windows 10 | TrueNAS Community
January 27, 2022 - All permissions in TrueNAS have been triple checked for the SMB share and my other PCs are able to access the NAS share, just this one laptop with the "Access Denied'' error. Is there something in the registry that needs to be changed? This laptop has gone from Windows 7 -> 11 so I wouldn't be surprised if something changed along the way.
🌐
DietPi
dietpi.com › troubleshooting
Can't write to samba share on Windows 11 despite changing the samba config - Troubleshooting - DietPi Community Forum
June 8, 2023 - Creating a bug report/issue Required Information DietPi version | G_DIETPI_VERSION_CORE=8 G_DIETPI_VERSION_SUB=18 G_DIETPI_VERSION_RC=2 G_GITBRANCH=‘master’ G_GITOWNER=‘MichaIng’ Distro version | bullseye 0 Kernel v…
🌐
Reddit
reddit.com › r/homenetworking › windows 11 cannot access linux samba guest share – keeps asking for credentials
r/HomeNetworking on Reddit: Windows 11 cannot access Linux Samba guest share – keeps asking for credentials
August 20, 2025 -

Hello,

I am trying to connect from Windows 11 to a shared folder on a Linux server (via SMB/Samba). The Linux share is configured for guest access (no username/password required).

When I try to access it with:

\...*****

Windows always prompts me for credentials.

If I use Command Prompt with:

net use T: \...***** "" /user:guest

I get the error:

System error 3227320323 has occurred.

On Windows 10, the same share works correctly with guest access, but on Windows 11 (version 10.0.26100.4946) it fails.


What I have already tried:

Added registry key:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters] "AllowInsecureGuestAuth"=dword:00000001

Modified LSA keys:

restrictanonymous = 0 restrictanonymoussam = 0

Deleted all saved SMB sessions with net use * /delete /y.

Rebooted after every change.

Tried connecting with guest as username and blank password.

Tried . \guest and ANONYMOUS as usernames.

Enabled SMB 1.0/CIFS File Sharing Support under “Windows Features” (including SMB1 client).

Verified that the Linux side works fine (tested with another Windows 10 machine, it connects immediately without credentials).


Question:

Has Windows 11 completely disabled guest/anonymous SMB access in the latest builds? If not, what additional steps can I take to make Windows 11 connect to a Samba guest share (no password)?

Thank you for any help.