network broke

Question

I have a home network, all running Windows Pro, all on the same network set to 'private', All on Win 11 24h2, except the new one at 25H2.

I used the same userid/pw on CompA, CompB, CompB
Family member uses their password on CompD

CompA has music and data, open share to guest and everyone as read&write. I am admin on this machine.
CompA also has myplace shared where only I can access or update this shared folder, shared to my users, icacs set for me.

CompB can access CompA's shares both public and provite

CompC is new with 25H2 and has my same userid/pw BUT CompB and CompA fail to access the public and private shares on CompC

CompD, the family member, used to be able to access the public shares on CompA but not any more.

Why did KB5068861 break public and private shares and how can I fix it?

Answer 1

The issues you're experiencing with accessing shared folders across your network may be related to changes introduced in Windows updates, particularly with the handling of SMB (Server Message Block) shares. The update KB5068861 may have affected how guest and user access is managed, especially with the introduction of stricter security measures in newer versions of Windows.

Here are a few steps you can take to troubleshoot and potentially resolve the issue:

1. Check Network Discovery and File Sharing Settings: Ensure that network discovery and file sharing are enabled on all computers. You can do this by going to Control Panel > Network and Sharing Center > Change advanced sharing settings and ensuring that both options are turned on for your network profile.
2. Review Sharing Permissions: Double-check the sharing permissions on CompA and CompC. Make sure that the folders are shared correctly and that the permissions allow access for the users you intend. You might want to remove and re-add the shares to refresh the settings.
3. Enable Insecure Guest Logons: If you are using guest accounts, you may need to enable insecure guest logons. This can be done through the Local Group Policy Editor or by modifying the registry. Note that enabling this can pose security risks, so consider it carefully.
4. Check SMB Settings: Ensure that SMB1 is enabled if required, as some older systems may still rely on it. However, be cautious as SMB1 is deprecated due to security vulnerabilities. You can check this in Control Panel > Programs > Turn Windows features on or off.
5. Firewall Settings: Check the firewall settings on CompC to ensure that it is not blocking file sharing. You may need to create exceptions for file sharing in the firewall settings.
6. Reboot and Update: Sometimes, simply rebooting the machines can resolve connectivity issues. Also, ensure that all machines are fully updated with the latest patches and updates from Microsoft.

If these steps do not resolve the issue, you may want to look into the specific changes made by KB5068861 and consider rolling back the update if necessary, although this should be a last resort.

---

References:

• Can't access shared folders from File Explorer in Windows 10
• Overview of problems that may occur when administrative shares are missing

Answer 2

You answer is wrong. KB5068861 disabled SMB1 and I cannot roll it back.