Samba share can't serve Win 10 since fall creator update - System error 1272

The name of the pictureThe name of the pictureThe name of the pictureClash Royale CLAN TAG#URR8PPP








up vote
1
down vote

favorite
1












I think I had this working awhile back, but now I can't connect over a Win 10 machine. Apparently this is because Windows (since the fall creator update to version 1709) no longer allows logging in as a guest - at least the Enterprise Edition. However I get the same error even when I specify the user/pass word in the net command like this:



C:>net use u: \192.168.12.12transfer /user:mike pass
System error 1272 has occurred.

You can't access this shared folder because your organization's security policies
block unauthenticated guest access.
These policies help protect your PC from unsafe or malicious devices on the network.


The share configuration in smb.conf looks like this:



[transfer]
comment = file transfer share
path = /usr/local/transfer
writable = yes
browsable = yes
valid users = mike
create mask = 0777
directory mask = 0777


It should be possible to configure this so that it works securely... some evidence is that my QNAP server - which uses Samba - continues to work (but with a non-guest user).



This is a Microsoft blurb on the issue:
https://support.microsoft.com/en-us/help/4046019/guest-access-smb2-disabled-by-default-in-windows-10-server-2016



I am really not sure what I should try next - the number of Samba configuration settings is vast. Any ideas?










share|improve this question























  • Are you suspecting that this is specific to the Enterprise Edition?
    – Robby1212
    Mar 13 at 13:33










  • I think this restriction - the default not allowing guest login to a samba share - even when it is required - is specific to the EE. Higher security standards I suppose.
    – Mike Wise
    Mar 13 at 13:38










  • I read about a flag to disable it, but that won't help me for long as Group Policy will just periodically flatten it again.
    – Mike Wise
    Mar 13 at 13:39










  • Is there a way to specify Samba version 3.00 on the net command?
    – Organic Marble
    Mar 13 at 15:48










  • Why? I guess you can enable/disable the various versions: support.microsoft.com/en-sg/help/2696547/…
    – Mike Wise
    Mar 13 at 16:00














up vote
1
down vote

favorite
1












I think I had this working awhile back, but now I can't connect over a Win 10 machine. Apparently this is because Windows (since the fall creator update to version 1709) no longer allows logging in as a guest - at least the Enterprise Edition. However I get the same error even when I specify the user/pass word in the net command like this:



C:>net use u: \192.168.12.12transfer /user:mike pass
System error 1272 has occurred.

You can't access this shared folder because your organization's security policies
block unauthenticated guest access.
These policies help protect your PC from unsafe or malicious devices on the network.


The share configuration in smb.conf looks like this:



[transfer]
comment = file transfer share
path = /usr/local/transfer
writable = yes
browsable = yes
valid users = mike
create mask = 0777
directory mask = 0777


It should be possible to configure this so that it works securely... some evidence is that my QNAP server - which uses Samba - continues to work (but with a non-guest user).



This is a Microsoft blurb on the issue:
https://support.microsoft.com/en-us/help/4046019/guest-access-smb2-disabled-by-default-in-windows-10-server-2016



I am really not sure what I should try next - the number of Samba configuration settings is vast. Any ideas?










share|improve this question























  • Are you suspecting that this is specific to the Enterprise Edition?
    – Robby1212
    Mar 13 at 13:33










  • I think this restriction - the default not allowing guest login to a samba share - even when it is required - is specific to the EE. Higher security standards I suppose.
    – Mike Wise
    Mar 13 at 13:38










  • I read about a flag to disable it, but that won't help me for long as Group Policy will just periodically flatten it again.
    – Mike Wise
    Mar 13 at 13:39










  • Is there a way to specify Samba version 3.00 on the net command?
    – Organic Marble
    Mar 13 at 15:48










  • Why? I guess you can enable/disable the various versions: support.microsoft.com/en-sg/help/2696547/…
    – Mike Wise
    Mar 13 at 16:00












up vote
1
down vote

favorite
1









up vote
1
down vote

favorite
1






1





I think I had this working awhile back, but now I can't connect over a Win 10 machine. Apparently this is because Windows (since the fall creator update to version 1709) no longer allows logging in as a guest - at least the Enterprise Edition. However I get the same error even when I specify the user/pass word in the net command like this:



C:>net use u: \192.168.12.12transfer /user:mike pass
System error 1272 has occurred.

You can't access this shared folder because your organization's security policies
block unauthenticated guest access.
These policies help protect your PC from unsafe or malicious devices on the network.


The share configuration in smb.conf looks like this:



[transfer]
comment = file transfer share
path = /usr/local/transfer
writable = yes
browsable = yes
valid users = mike
create mask = 0777
directory mask = 0777


It should be possible to configure this so that it works securely... some evidence is that my QNAP server - which uses Samba - continues to work (but with a non-guest user).



This is a Microsoft blurb on the issue:
https://support.microsoft.com/en-us/help/4046019/guest-access-smb2-disabled-by-default-in-windows-10-server-2016



I am really not sure what I should try next - the number of Samba configuration settings is vast. Any ideas?










share|improve this question















I think I had this working awhile back, but now I can't connect over a Win 10 machine. Apparently this is because Windows (since the fall creator update to version 1709) no longer allows logging in as a guest - at least the Enterprise Edition. However I get the same error even when I specify the user/pass word in the net command like this:



C:>net use u: \192.168.12.12transfer /user:mike pass
System error 1272 has occurred.

You can't access this shared folder because your organization's security policies
block unauthenticated guest access.
These policies help protect your PC from unsafe or malicious devices on the network.


The share configuration in smb.conf looks like this:



[transfer]
comment = file transfer share
path = /usr/local/transfer
writable = yes
browsable = yes
valid users = mike
create mask = 0777
directory mask = 0777


It should be possible to configure this so that it works securely... some evidence is that my QNAP server - which uses Samba - continues to work (but with a non-guest user).



This is a Microsoft blurb on the issue:
https://support.microsoft.com/en-us/help/4046019/guest-access-smb2-disabled-by-default-in-windows-10-server-2016



I am really not sure what I should try next - the number of Samba configuration settings is vast. Any ideas?







networking samba windows-10 file-sharing






share|improve this question















share|improve this question













share|improve this question




share|improve this question








edited Mar 13 at 15:31

























asked Mar 13 at 13:18









Mike Wise

1668




1668











  • Are you suspecting that this is specific to the Enterprise Edition?
    – Robby1212
    Mar 13 at 13:33










  • I think this restriction - the default not allowing guest login to a samba share - even when it is required - is specific to the EE. Higher security standards I suppose.
    – Mike Wise
    Mar 13 at 13:38










  • I read about a flag to disable it, but that won't help me for long as Group Policy will just periodically flatten it again.
    – Mike Wise
    Mar 13 at 13:39










  • Is there a way to specify Samba version 3.00 on the net command?
    – Organic Marble
    Mar 13 at 15:48










  • Why? I guess you can enable/disable the various versions: support.microsoft.com/en-sg/help/2696547/…
    – Mike Wise
    Mar 13 at 16:00
















  • Are you suspecting that this is specific to the Enterprise Edition?
    – Robby1212
    Mar 13 at 13:33










  • I think this restriction - the default not allowing guest login to a samba share - even when it is required - is specific to the EE. Higher security standards I suppose.
    – Mike Wise
    Mar 13 at 13:38










  • I read about a flag to disable it, but that won't help me for long as Group Policy will just periodically flatten it again.
    – Mike Wise
    Mar 13 at 13:39










  • Is there a way to specify Samba version 3.00 on the net command?
    – Organic Marble
    Mar 13 at 15:48










  • Why? I guess you can enable/disable the various versions: support.microsoft.com/en-sg/help/2696547/…
    – Mike Wise
    Mar 13 at 16:00















Are you suspecting that this is specific to the Enterprise Edition?
– Robby1212
Mar 13 at 13:33




Are you suspecting that this is specific to the Enterprise Edition?
– Robby1212
Mar 13 at 13:33












I think this restriction - the default not allowing guest login to a samba share - even when it is required - is specific to the EE. Higher security standards I suppose.
– Mike Wise
Mar 13 at 13:38




I think this restriction - the default not allowing guest login to a samba share - even when it is required - is specific to the EE. Higher security standards I suppose.
– Mike Wise
Mar 13 at 13:38












I read about a flag to disable it, but that won't help me for long as Group Policy will just periodically flatten it again.
– Mike Wise
Mar 13 at 13:39




I read about a flag to disable it, but that won't help me for long as Group Policy will just periodically flatten it again.
– Mike Wise
Mar 13 at 13:39












Is there a way to specify Samba version 3.00 on the net command?
– Organic Marble
Mar 13 at 15:48




Is there a way to specify Samba version 3.00 on the net command?
– Organic Marble
Mar 13 at 15:48












Why? I guess you can enable/disable the various versions: support.microsoft.com/en-sg/help/2696547/…
– Mike Wise
Mar 13 at 16:00




Why? I guess you can enable/disable the various versions: support.microsoft.com/en-sg/help/2696547/…
– Mike Wise
Mar 13 at 16:00















active

oldest

votes











Your Answer







StackExchange.ready(function()
var channelOptions =
tags: "".split(" "),
id: "89"
;
initTagRenderer("".split(" "), "".split(" "), channelOptions);

StackExchange.using("externalEditor", function()
// Have to fire editor after snippets, if snippets enabled
if (StackExchange.settings.snippets.snippetsEnabled)
StackExchange.using("snippets", function()
createEditor();
);

else
createEditor();

);

function createEditor()
StackExchange.prepareEditor(
heartbeatType: 'answer',
convertImagesToLinks: true,
noModals: false,
showLowRepImageUploadWarning: true,
reputationToPostImages: 10,
bindNavPrevention: true,
postfix: "",
onDemand: true,
discardSelector: ".discard-answer"
,immediatelyShowMarkdownHelp:true
);



);













 

draft saved


draft discarded


















StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1014558%2fsamba-share-cant-serve-win-10-since-fall-creator-update-system-error-1272%23new-answer', 'question_page');

);

Post as a guest



































active

oldest

votes













active

oldest

votes









active

oldest

votes






active

oldest

votes















 

draft saved


draft discarded















































 


draft saved


draft discarded














StackExchange.ready(
function ()
StackExchange.openid.initPostLogin('.new-post-login', 'https%3a%2f%2faskubuntu.com%2fquestions%2f1014558%2fsamba-share-cant-serve-win-10-since-fall-creator-update-system-error-1272%23new-answer', 'question_page');

);

Post as a guest













































































Popular posts from this blog

pylint3 and pip3 broken

Missing snmpget and snmpwalk

How to enroll fingerprints to Ubuntu 17.10 with VFS491