[Samba] system error 58 when guest connects from Win10

Klaus Hartnegg hartnegg at gmx.de
Fri Mar 22 08:54:24 UTC 2019

> Am 04.05.2017 um 17:49 schrieb Klaus Hartnegg:
> I cannot connect as guest from Win10 to Samba anymore,
> since I removed "server max protocol = NT1"

Finally found the answer:
win10-1709 disables guest access to shares using SMB2.

You can re-enable insecure guest logons via GPO:
Computer configuration\administrative templates\network\Lanman Workstation

However Microsoft discourages this because security:
"Guest logons do not support standard security features such as signing and encryption. Therefore, guest logons are vulnerable to man-in-the-middle attacks that can expose sensitive data on the network. Windows disables "insecure" (nonsecure) guest logons by default. Microsoft recommends that you do not enable insecure guest logons."

Additionally I found that if samba runs as AD-DC, then guest logon appears to work again. Presumably because in this case the client is also authenticated to the server with its machine account.

More information about the samba mailing list