iTechGuides is reader-supported. When you buy through links on our site, we may earn an affiliate commission. As an Amazon Associate I earn from qualifying purchases. Learn more
Windows 11 24H2 requires SMB signing by default for inbound and outbound connections on Enterprise, Pro and Education editions; Home is documented as not requiring it by default. If a NAS or network share stops connecting after an upgrade, the server may not support signing or may rely on guest access. The durable fix is to enable signing on the server and connect with an authenticated account.
What changed, and which Windows editions are affected?
Microsoft first announced the default requirement for all connections in Windows 11 Insider Preview Build 25381 Enterprise on June 2, 2023. Previously, signing was mainly required for SYSVOL and NETLOGON shares and for clients connecting to Active Directory domain controllers. Microsoft’s current guidance documents the requirement for Windows 11 24H2 and Windows Server 2025. The Windows 11 edition behavior is not universal: Enterprise, Pro and Education require signing in both directions by default, while Home does not require inbound or outbound signing by default.
See Microsoft’s Build 25381 announcement, SMB security guidance and SMB signing documentation for the rollout and edition details.
Recommended Free Tools
What SMB signing does
SMB signing adds a cryptographic signature to each SMB message. The signature is generated using the session key and cipher suite; the receiving device can detect if a message was altered because its signature no longer matches. Microsoft says signing helps prevent data tampering and relay attacks that could steal credentials.
#1 Best Overall
- 1.1 GHz (boost up to 2.4GHz) Intel Celeron N5030 Quad-Core
Signing protects the integrity of SMB traffic; it does not make an unsupported server compatible or turn unauthenticated guest access into a secure login. Pair it with authenticated accounts and server-side signing support.
Why a NAS or network share may fail
The server does not support signing
If a third-party SMB server cannot sign messages as required, the connection can fail with STATUS_INVALID_SIGNATURE, 0xc000a000 or -1073700864. Microsoft specifically documents these errors for third-party servers that do not allow signing. Check the NAS or file-server documentation and firmware settings for SMB signing support; enabling and requiring it on the server is the preferred resolution.
The share depends on guest access
Required signing also rejects guest fallback. A share that previously opened without credentials may instead display a message that organizational policy blocks unauthenticated guest access because it is unsafe. Configure a named account on the server and connect using that account rather than relying on guest access.
Rank #2
- 256 GB SSD of storage.
- Multitasking is easy with 16GB of RAM
- Equipped with a blazing fast Core i5 2.00 GHz processor.
The device is a consumer NAS or router with USB storage
Microsoft notes that Windows 11 24H2 changes can affect mapped drives to third-party consumer NAS devices and routers with USB storage. That does not establish that every such device is incompatible: check the specific device’s SMB and signing capabilities. Microsoft’s mapped-drive troubleshooting guidance covers this compatibility area.
How to restore access safely
- Identify the Windows edition and error. Confirm whether the PC runs Windows 11 24H2 Pro, Enterprise or Education, and record any signing or guest-access error shown when connecting.
- Check the NAS or server configuration. Look for SMB signing options and install supported firmware or software updates if needed. Configure the server to support and require signing.
- Use authenticated access. Create or select a server account with the necessary share permissions, then connect using that account instead of guest access.
- Retry the share. Use its server name and share path, then remap the drive if required. If signing errors remain, consult the server vendor because the server may not implement signing compatibly.
Microsoft advises against disabling signing as a workaround for third-party servers and does not recommend reverting to SMB1 as a routine fix. Disabling signing weakens protection; SMB1 is not a substitute for updating or correctly configuring the server.
How administrators configure and verify SMB signing
Group Policy
Open Computer Configuration → Windows Settings → Security Settings → Local Policies → Security Options. Configure the relevant Microsoft network client: Digitally sign communications (always) or Microsoft network server: Digitally sign communications (always) policy, according to whether the computer acts as an SMB client or server.
Rank #3
- 14" diagonal, 1366x768 resolution, HD BrightView LED, Glossy NON-TOUCH Display
PowerShell
Run PowerShell as an administrator. To require signing for outbound SMB client connections:
Quick wins for a faster PC:
Fix the driver behind crashes, sound loss and screen glitchesFind Drivers →Clear out junk files and repair common Windows errorsFree Scan →Set-SmbClientConfiguration -RequireSecuritySignature $true
To require signing for inbound SMB server connections:
Rank #4
- EFFORTLESS EVERYDAY PERFORMANCE: Powered by Intel Celeron N4020 processor and Windows 11 Home system, delivering reliable, low-power efficiency for daily tasks like document editing, email, online classes, and web browsing
- 15.6-INCH FULL HD DISPLAY: Enjoy immersive visuals on the 15.6" FHD (1920x1080) anti-glare screen with micro-edge bezels. Delivers clear details and comfortable viewing for long study sessions, working on spreadsheets, and video playback
- RESPONSIVE MULTITASKING & STORAGE: Built with 4GB LPDDR4 RAM and 128GB eMMC storage for smooth daily essential use. Expand your storage by up to 1TB via the integrated TF card slot to easily store movies, photos, and working files
- ADVANCED CONNECTIVITY: Outfitted with 2x Full-Featured Type-C ports for data transfer, fast charging, and dual-monitor output, alongside 2x USB 3.2 Gen1 ports and a 3.5mm audio jack for complete peripheral compatibility
- LIGHTWEIGHT & SILENT OPERATION: Slim and portable for effortless travel or commuting. Features a 1MP HD webcam for remote meetings, 38Wh battery with 45W Type-C fast charging, and a fanless silent design for peaceful work environments.
Set-SmbServerConfiguration -RequireSecuritySignature $true
Check the client setting with:
Get-SmbClientConfiguration | FL RequireSecuritySignature
The Tool Desk
Outbyte Driver Updater FREEFix the driver behind crashes, sound loss and screen glitchesFind Drivers →Outbyte PC Repair FREERepair Windows errors before they cause bigger problemsFix Now →Check the server setting with:
Get-SmbServerConfiguration | FL RequireSecuritySignature
Best Value
- 【Efficient Performance】 Powered by Intel Core i3 processor (2 cores, 4 threads, up to 3.4GHz) with 12GB RAM and 256GB SSD. Handles multitasking, office software, online classes, and HD video streaming smoothly. Integrated Intel UHD Graphics 620
- Backlit Keyboard & Complete Package】Comes with a cool backlit keyboard. Comes with awebcam, dual stereo speakers (8Ω/1.0W each), DC charger, and user manual – ready for late-night studying, online classes, video conferencing, and daily productivity
- 【Vibrant Display】 15.6-inch Full HD (1920x1080) anti-glare screen with 16:9 aspect ratio delivers crisp images and vivid colors – perfect for studying, watching lectures, or entertainment. Thin-bezel design maximizes viewing area
- 【Fast Connectivity & Expansion】 Equipped with WiFi 6 (802.11ax) and Bluetooth 5.2 for stable, high-speed wireless. Features 3 x USB 3.0, HDMI 2.1, Type-C (supports PD3.0 fast charging), and a TF card slot expandable up to 2TB – easily connect external monitors, mice, drives, or expand storage for all your files
- 【Long Battery Life & Portable】 Built-in 11.55V 5000mAh/57.75Wh high-capacity battery delivers approximately 7 hours of mixed-use battery life – enough for a full day of classes and assignments. Lightweight at just 1.63kg (3.6 lbs) and 19.5mm thin, plus a compact packing size – easily slips into a backpack for campus, library, or coffee shop
For deployment planning, Microsoft recommends Kerberos instead of NTLMv2, avoiding connections by IP address, and avoiding CNAME DNS records when deploying signing. Review the Microsoft signing guidance for the conditions and administrative details.
Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Should you disable SMB signing?
Usually not. Microsoft states, “We don’t recommend disabling SMB signing as a workaround for third-party servers.” Disabling it may restore compatibility with a legacy device, but it removes an integrity protection and does not solve the underlying server limitation. Consider it only as a deliberate, temporary exception after weighing the risk and restricting access appropriately; the preferred fix remains a signing-capable server with authenticated access.
Quick Recap
Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.
Do these 3 things before closing this tab:
1Clear out junk files and repair common Windows errors2Fix the driver behind crashes, sound loss and screen glitches3Repair Windows errors before they cause bigger problems
