Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Samba lets Linux provide Windows-compatible SMB file shares, while Windows already includes its own SMB client and server components. On a typical network, you install and configure Samba on Ubuntu or another Linux server, then connect from Windows with a UNC path such as \192.168.1.10share.

This guide covers a practical Ubuntu setup, configuration validation, Windows connection problems, SMB protocol compatibility, and the security issues behind common advice such as “enable SMB1.”

What Samba does—and what Windows does not need

Samba is the Linux/Unix implementation of SMB, the protocol used by Windows file sharing. You do not install the Linux Samba package on Windows. Windows already includes SMB client functionality for opening Linux shares and SMB server functionality for sharing Windows folders.

Install Samba on the Linux machine that will host the files. The current Samba project page labels Samba 4.24.5 as the current stable release. Samba 4.23.0 was released on September 12, 2025; the 4.23 series enables SMB3 UNIX Extensions by default. Windows clients that do not support those extensions continue to use standard SMB3 behavior.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
#1 Best Overall
Sale
UGREEN Cat 8 Ethernet Cable 6FT, High Speed Braided 40Gbps 2000Mhz Network Cord Cat8 RJ45 Shielded Indoor Heavy Duty LAN Cables Compatible with Gaming PC PS5 PS4 PS3 Xbox Modem Router 6FT
  • 40 Gbps 2000 Mhz High Speed: The Cat 8 ethernet cable support max. 40 Gbps data transfer and 2000 MHz Brandwith, ideal for gaming and streaming, greatly improving upload and download speed, sound, image and resolution quality
  • Excellent Anti-interference: The ethernet cable comes with 4 shielded foiled twisted pairs (F/FTP), pure copper core and gold-plated RJ45 connector, reducing interference, noise and crosstalk, making network speed faster and more stable
  • Marvelous Durability: Internet cable wrapped with quality cotton braided cord, which makes the LAN cable stronger and more durable. The test proves that this internet cable can be bent at least 10000 times without broken, very suitable for long-term use
  • PoE Supported: All lengths of ethernet cord can support the PoE power supply function except 65ft. You don't need additional power supply when installing a PoE camera, which is very convenient and safe
  • Wide Compatibility: With the RJ45 Connector, network cable can be perfectly compatible with computers, laptops, modems, routers, PS5, X-Box and other networking devices. It can also be fully backward compatible with Cat7, Cat6e, Cat6, Cat5e, Cat5

Install Samba on Ubuntu

On Ubuntu, install the server package with:

sudo apt update
sudo apt install samba

The primary configuration file is:

/etc/samba/smb.conf

Ubuntu’s default file contains many commented settings, but it is not a complete list of Samba options. For an unfamiliar directive, consult the smb.conf manual page rather than guessing its spelling or behavior.

Before editing, make a backup:

sudo cp /etc/samba/smb.conf /etc/samba/smb.conf.backup

Configure a simple Samba share

The following example creates a guest-accessible share named share. It is suitable for a trusted home or test network, not for confidential data or an untrusted network.

  1. Create the directory:

    sudo mkdir -p /srv/samba/share
  2. Assign it to Ubuntu’s guest account and group:

    sudo chown nobody:nogroup /srv/samba/share/
  3. Open the Samba configuration:

    sudo nano /etc/samba/smb.conf
  4. In the [global] section, set the workgroup used by your Windows network. For example:

    [global]
        workgroup = EXAMPLE

    Do not create a second [global] section if one already exists. Change the existing setting instead.

    Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  5. Add this share section at the end of the file:

    [share]
        comment = Ubuntu File Server Share
        path = /srv/samba/share
        browsable = yes
        guest ok = yes
        read only = no
        create mask = 0755
Directive Purpose
comment Description shown to clients.
path Linux directory exported by Samba.
browsable = yes Allows the share to be displayed when browsing the server in Windows Explorer.
guest ok = yes Allows connections without entering a Samba password.
read only = no Allows clients to create and change files.
create mask = 0755 Controls permissions assigned to newly created files.

This configuration gives any client on the local network read and write access without a password. Both Samba’s access rules and the Linux filesystem permissions must allow the requested operation. Guest access is convenient, but a named-user share is safer for anything important.

Validate and apply the configuration

Check the file before restarting services:

testparm

Read the reported settings and fix any syntax error it identifies. In Active Directory server mode, Samba documentation specifies samba-tool testparm instead.

Apply a valid configuration by restarting the documented Ubuntu services:

sudo systemctl restart smbd.service nmbd.service

Check whether they started successfully:

systemctl status smbd.service nmbd.service

If Ubuntu’s firewall is enabled, permit Samba traffic:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #2
Sale
Jadaol Cat6/Cat6A Ethernet Cable 50FT Flat with Clips 10Gbps Network, White
  • Cat 6 performance at a Cat5e price but with higher bandwidth
  • High Performance Cat6, 30 AWG, RJ45 Ethernet Patch Cable provides universal connectivity for LAN network components such as PCs,computer servers,printers,routers,switch boxes,network media players,NAS,VoIP phones
  • Jadaol cat6 standard cable support Cat8 and Cat7 network and provides performance of up to 250 MHz 10Gbps and is suitable for 10BASE-T, 100BASE-TX (Fast Ethernet), 1000BASE-T/1000BASE-TX (Gigabit Ethernet) and 10GBASE-T (10-Gigabit Ethernet)
  • UTP(Unshielded Twisted Pair) patch cable with RJ45 gold-plated Connectors and are made of 100% bare copper wire, ensure minimal noise and interference
  • The unique flat cable shape allows for a cleaner and safer installation. You can easily and seamlessly make the cable run along walls, follow edges & corners or even make it completely invisible by sliding it under a carpet.
sudo ufw allow Samba

Only do this when the firewall rule is appropriate for the machine’s network. A firewall exception should not expose a guest-writeable share to the internet.

Connect from Windows

  1. Open File Explorer.
  2. Click the address bar.
  3. Enter the server address, for example \192.168.1.10.
  4. Open share.

If network discovery does not list the Linux machine, enter its IP address directly. To open the share in one step, use:

\192.168.1.10share

Replace the address with the Linux server’s actual IP address or hostname. If a hostname fails but the IP works, investigate name resolution or network discovery; that does not necessarily indicate a Samba configuration error.

Add another share

Each additional share gets its own section in /etc/samba/smb.conf. For example:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
[qa]
    path = /srv/samba/qa

Create the directory, set suitable Linux ownership and permissions, validate the file, and restart Samba:

sudo mkdir -p /srv/samba/qa
sudo testparm
sudo systemctl restart smbd.service nmbd.service

The short example above inherits broader settings from [global]. For production use, define access explicitly rather than relying on inherited or permissive defaults.

Use named Samba users instead of guest access

A password-protected share normally requires three things: a Linux account, a Samba password for that account, and a share that permits that user or group. Add an existing Linux user to Samba with:

sudo smbpasswd -a username

The smbpasswd command sets passwords for local Samba users. Create the Linux account first if necessary, then assign ownership and filesystem permissions to the directories it should access. A share can then use settings such as:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #3
DbillionDa Cat 8 Ethernet Cable, 6FT 40Gbps 2000MHz RJ45 LAN Cable
  • Designed for Outdoor & Direct Burial Installations – Heavy-duty double-shielded Cat8 Ethernet cable minimizes EMI/RFI interference and delivers stable long-distance performance. Waterproof, anti-corrosion PVC jacket allows safe direct burial and reliable use in outdoor or indoor environments.
  • 26AWG for Stable High-Load Networks – Thicker 26AWG conductors provide faster, more stable data transmission than standard 32AWG cables. Ideal for high-performance home networks, gaming setups, smart homes, and data-intensive applications.
  • F/FTP Shielding & Hyper-Speed Performance: Cat8 Ethernet cable constructed with 4 shielded foiled twisted pairs and 26AWG OFC conductors; supports bandwidth up to 2000 MHz and data transmission speeds up to 40 Gbps, effectively reducing signal interference and ensuring stable connections. Ideal for low-latency gaming, 4K/8K streaming, and high-speed internet connections.
  • RJ45 Connectors & Wide Compatibility: Cat8 Ethernet cable with two shielded RJ45 connectors; compatible with networking switches, IP cameras, routers, Nintendo Switch, modems, PS3, PS4, Xbox, patch panels, servers, smart TVs, and more; works with Cat7, Cat6, Cat5e, and Cat5 devices
  • Weatherproof & UV Resistant: Outdoor-rated Cat8 Ethernet cable with UV-resistant PVC jacket; withstands direct sunlight, extreme cold, humidity, and hot weather; anti-aging and durable; Includes 18-month support.
[private]
    path = /srv/samba/private
    browsable = yes
    read only = no
    valid users = username

After editing, run testparm and restart smbd.service and nmbd.service. Windows may retain an old connection using different credentials. Disconnect that connection before retrying, or use:

net use * /delete

Run that command in Windows Command Prompt, then reconnect and enter the intended username and password.

Do not enable SMB1 as a routine fix

SMBv1 is obsolete and insecure. It is no longer installed by default beginning with Windows 10 Fall Creators Update and Windows Server 2019. Modern Samba and Windows clients should use SMB2 or SMB3.

On Windows 8.1, Windows 10, and Windows 11, the optional-feature path is:

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Control Panel → Programs and Features → Turn Windows features on or off → SMB 1.0/CIFS File Sharing Support

Clear that feature and restart if it is enabled. Microsoft also provides these elevated PowerShell commands:

Get-WindowsOptionalFeature -Online -FeatureName SMB1Protocol
Disable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol
Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

Enabling or disabling the optional SMB1 feature causes a restart. To check the Windows SMB server’s SMB1 status without elevation:

Get-SmbServerConfiguration | Format-List EnableSMB1Protocol

For the Windows SMB server, SMB1 can be changed without a restart with:

What’s actually slowing this PC down?

Pick the symptom - the matching free tool is one click away.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Rank #4
Smolink Cat 8 Ethernet Cable, 50ft 40Gbps 2000MHz RJ45 LAN Cable
  • Cat 8 Speed, Cat 5/5e Value Enjoy Cat 8 Ethernet cable performance at a Cat 5/5e-level value. With up to 40Gbps speed and 2000MHz bandwidth, this high speed internet cable delivers more bandwidth than standard Cat 5 and Cat 5e cables, helping support smooth gaming, streaming, video calls, large file transfers and everyday wired network use.
  • 40Gbps Speed, Wide Compatibility This Cat 8 Ethernet cable supports up to 40Gbps data transfer and 2000MHz bandwidth for fast, reliable internet performance. Standard RJ45 connectors are backward compatible with Cat7, Cat6, Cat6a and Cat5e devices, including routers, modems, switches, gaming PCs, PS5, PS4, Xbox, smart TVs, laptops and printers.
  • Stable U/FTP Shielding Each of the 4 twisted pairs is individually wrapped with aluminum foil to help reduce crosstalk, noise, and signal interference. Combined with RJ45 connectors on both ends, the U/FTP design helps maintain cleaner signal transmission for a stable and reliable wired network connection.
  • Nylon Braided Durability The nylon braided jacket adds everyday durability while keeping the cable flexible and easy to route. Reinforced construction helps the cord handle bending, pulling and frequent plugging, making it a reliable choice for desks, gaming rooms, home offices and long-term network setups.
  • 50ft Reach for More Setups The 50 ft length makes it easier to connect devices across rooms, along walls, under desks or around corners. Great for router-to-PC connections, modem-to-TV setups, gaming consoles, workstations, printers and other home network equipment that needs a longer Ethernet cable.
Set-SmbServerConfiguration -EnableSMB1Protocol $false
Set-SmbServerConfiguration -EnableSMB1Protocol $true

These commands affect Windows’ own SMB server configuration, not the Linux Samba server. They are not a substitute for fixing Samba authentication, permissions, firewall rules, or protocol settings.

Windows 11 24H2 compatibility considerations

Windows 11 24H2 and Windows Server 2025 require SMB encryption by default for outbound SMB client connections. A connection can fail when the destination supports neither SMB 3.x nor the required encryption capability. This is a capability and policy issue, not an indication that SMB1 should be enabled.

Those Windows releases also add controls for SMB client and server dialects, SMB NTLM blocking for remote outbound connections, and an SMB authentication rate limiter. Repeated incorrect-password attempts can therefore result in progressively longer delays. NTLM blocking can prevent connections that depend on NTLM when a more secure authentication method, such as Kerberos, is required.

When diagnosing a current Windows client, check the Windows SMB policy and the Samba server’s supported protocol and authentication configuration before changing legacy settings.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

Samba 4.23 features that may affect deployments

Samba 4.23 enables SMB3 UNIX Extensions by default. A compatible client can receive better Unix metadata behavior, while clients without support continue with ordinary SMB3 behavior.

File write timestamps also changed in Samba 4.23. They are updated immediately, matching modern Windows 10 and Windows Server 2016-or-newer behavior rather than the older delayed-update behavior. Applications that compare timestamps closely may therefore behave differently after an upgrade.

Samba 4.23 adds SMB over QUIC configuration through client smb transports and server smb transport. A server-side example is:

server smb transports = +quic

Server-side QUIC requires the quic.ko Linux kernel module. The client can fall back to the userspace ngtcp2 library. Samba’s client-side QUIC mode requires a name-based UNC path; an IP-address-based path is not supported. In other words, use a path based on a resolvable server name rather than \192.168.1.10share when using that client transport.

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
Best Value
MORELECS Cat 7 Flat Ethernet Cable 6.6FT,10Gbps,Braided,Shielded(3FT-150FT)
  • [Flat Design, Zero Cable Clutter] - Lies perfectly flat against walls, under rugs, along baseboards, and through tight spaces without kinks, tangles, or messy coils. Customers praise it for effortless installation and clean cable management that blends into any room.
  • [REINFORCED BRAIDED CONSTRUCTION FOR LONG‑LASTING PERFORMANCE] - Premium cotton braided jacket paired with reinforced RJ45 connectors delivers outstanding durability, rigorously tested for over 15,000 bend cycles. Many customers describe this ethernet cable as rock‑solid and well‑crafted, ideal for long‑term daily use with no worries about premature wear‑and‑tear or connection failure
  • [10GBPS SPEED & 600MHZ BANDWIDTH — GAMING, STREAMING & FIBER READY] - Delivers 10Gbps data transfer rate with 600MHz bandwidth for PS5, Xbox, 4K streaming, and fiber internet. Customers report stable performance and fast speeds. Backward compatible with Cat 6 and Cat 5e devices
  • [STP SHIELDING & GOLD-PLATED RJ45 — MINIMIZES EMI/RFI INTERFERENCE] - 100% bare copper STP shielding helps protect signal integrity when routed near power cords. Gold-plated RJ45 connectors resist corrosion. Compatible with 2.5GB network card
  • [Works with Everything — Router, Modem, PS5, Xbox, PC, Smart TV, Printer More ] - Full backward compatibility with Cat7, Cat6, Cat6a, and Cat5e devices means this one cable works with all your home or office equipment today, and future upgrades tomorrow. Works with 10/100/1000/10G/40G BASE-T speeds. Includes 36-month warranty with free replacement support

Useful Samba diagnostics

Command Use
testparm Checks the syntax and displays the effective smb.conf configuration.
smbstatus Shows current connections to smbd.
smbtree Lists visible SMB workgroups, servers, and shares from the command line.
smbpasswd Adds or changes passwords for local Samba users.

For service failures, inspect the journal:

sudo journalctl -u smbd.service -u nmbd.service --no-pager -b

A useful troubleshooting order is: test the configuration, confirm the services are running, verify the share directory and Linux permissions, check the firewall, connect by IP address, and then investigate Windows authentication or SMB policy. This order avoids changing protocol versions when the actual problem is a missing directory or a rejected password.

Security checklist

  • Do not expose a guest-writeable share outside a trusted local network.
  • Prefer named users, groups, and explicit valid users rules for private data.
  • Keep Samba and Ubuntu updated.
  • Do not enable SMB1 unless a genuinely incompatible legacy device requires it and you understand the risk.
  • Check both Samba permissions and Linux filesystem permissions.
  • Restrict firewall access to the networks that need the share.
  • Use SMB encryption and stronger authentication where the client and server policies require or support them.

FAQ

Do I install Samba on Windows?

No. Install Samba on the Linux machine providing the share. Windows already includes SMB client and server components; connect from File Explorer with a UNC path such as \servershare.

Why can Windows not see my Samba server?

Try the server’s IP address directly, such as \192.168.1.10. Then check that smbd is running, the share passes testparm, the firewall permits Samba, and the share directory exists. A discovery problem and a file-sharing problem are not always the same issue.

Should I enable SMB1 to connect to Samba?

Usually no. SMB1 is not installed by default on current Windows releases and is obsolete. Use SMB2 or SMB3 and investigate authentication, permissions, firewall rules, encryption requirements, and server capability instead.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

How do I apply a change to smb.conf?

Run testparm, then restart the documented Ubuntu services with sudo systemctl restart smbd.service nmbd.service.

Why does a guest share fail on Windows 11 24H2?

A valid guest ok = yes setting does not override Windows security policy. Windows 11 24H2 can require SMB encryption for outbound connections and can restrict authentication methods. Use an authenticated share and ensure the Samba server supports the required SMB3 and encryption capabilities.

The Bottom Line

For a dependable setup, install Samba on Ubuntu, define shares in /etc/samba/smb.conf, validate with testparm, restart smbd and nmbd, and connect from Windows with a UNC path. Guest access is useful for a controlled test network, but named users and explicit permissions are the better default for real files. Modern Windows and Samba use SMB2/SMB3; enabling SMB1 should be an exceptional compatibility decision, not the first troubleshooting step.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.