Win11 24H2 will adjust security rules and NAS user access may fail

Update Preview: Windows 11 24H2 is coming The preview version of Windows 11 24H2 has been officially released, which means that the highly anticipated official version is coming soon. PHP editor Xiaoxin would like to remind all digital enthusiasts to pay attention to this important update. Windows 11 24H2 will bring a series of exciting improvements, including: Performance optimization: Improve the overall performance and stability of the operating system. New Features: Introducing new features such as taskbar widgets and file explorer tabs. Bug Fix: Addresses known issues found in Windows 11 24H1. For more details on the Windows 11 24H2 preview, continue reading this article. PHP editor Xiaoxin will provide you with comprehensive coverage, including new features, improvements and known issues.

Of course, the most noteworthy thing about Windows 11 24H2 is the new features and improvements in AI. It is said that Microsoft will deeply integrate Copliot. However, AI is not the subject of this article. The subject of this article is to introduce readers to two new security rule changes in the Windows 11 24H2 version, which may affect some NAS users.

Specifically, in the Windows 11 24H2 version, Microsoft will make two important changes to network access rules:

1. By default, all connections require SMB signatures. This rule improves security by preventing network tampering and blocks relay attacks that send credentials to malicious servers.

2. Microsoft will disable unsecured guest logins in Windows 11 24H2 Professional Edition (and later versions). This rule can improve user security when connecting to untrusted devices.

Prior to this, the guest account allowed users to connect to the SMB server without entering a username or password. Although it was very convenient, it also posed a very large security risk. It may lead to the user's device being tricked by an attacker, connecting to a malicious server, thereby stealing the user's data, or maliciously encrypting the user's data for extortion.

Adjusting these two safety rules can greatly improve safety, but everything has its pros and cons, and there may also be some negative consequences. Because some NAS devices were developed and designed based on previous security rules, when users update to Windows 11 version 24H2 and the new security rules take effect, users may experience various errors when accessing these NAS devices and cannot use them normally.

If the user's NAS device does not support SMB signature, you may encounter the following various error messages, including but not limited to:

0x00a000, -1073700864, ​​invalid signature (STATUS_INVALID_SIGNATURE), invalid encryption signature (STATUS_INVALID_SIGNATURE), etc.

If the user's NAS device needs to support insecure guest logins, they may receive the following error message, including but not limited to:

You cannot access this shared folder because the organization's security policy blocks unsecured guest logins. Authenticated Guest Access, these policies help protect your computer from unsafe or malicious devices on the network, 0x80070035, 0x800704f8, The network path was not found, System error 3227320323 occurred (System error 3227320323 has occurred).

If users really encounter the above problems when updating to Windows 11 24H2 version in the future, they can solve it through the following two temporary methods:

1. Disable SMB client signature requirement

Search in the "Start" menu , enter gpedit and launch the "Edit Group Policy" application (Local Group Policy Editor), select "Computer Configuration" > "Windows Settings" > "Security Settings" > "Local Policy" > "Security Options", Double-click on Microsoft Network Client: Digitally Sign Communications (Always) and finally select Disabled > OK, see image above.

2. Enable insecure guest login

Enter gpedit in the "Start" menu search and launch the "Edit Group Policy" application (Local Group Policy Editor), select "Computer Configuration" > "Administrative Templates" > Network > Lanman Workstation", double-click "Enable insecure guest logins" and finally select "Enabled" > "OK", see the image above.

It needs to be emphasized and pointed out that these two solutions are only stopgap measures and involve significant security risks. Microsoft will urge the majority of NAS device manufacturers to update the relevant firmware and software of their products as soon as possible to comply with Windows 11 24H2. New cybersecurity rules.

Therefore, in the recent period, the majority of NAS device users need to pay close attention to the official instructions from Microsoft and NAS device manufacturers, and update relevant firmware and software in a timely manner. This is the most reliable and safe approach.

The above is the detailed content of Win11 24H2 will adjust security rules and NAS user access may fail. For more information, please follow other related articles on the PHP Chinese website!