Fixing network issue after upgrade or clean install of windows 11 24H2 (This worked for me)


Frecklesnoot

"That Repair Guy"
Member
Local time
6:36 PM
Posts
16
Location
Mildura, Australia
OS
Windows 11 Pro 24H2 Build 26100.2605
It seems to an issue with the increased security of networking in 24H2 that breaks it.

I had a client in the last week that needed a clean install of his system, he has a habit of playing around and breaking things. Which he gets told off for all the time.

The client also has a windows 10 file server with the drives mapped to all of his computers. All connections to the mapped drive worked while the system was on 23H2, nut with the installation of 24H2 these connections broke.

Here’s what I did to fix those network connections back to the server.

This is based on Windows 11 Home, but should work on Windows 11 Pro. Also there is no username or password set for these settings.

What I did first was check the Network and Sharing options and made sure that Network Discovery and Print Sharing was turned on for Private, Public and All Network. Then I turned off the Password Protect Sharing.

Path: Start--> Settings--> Network--> Advanced Network Settings--> Advanced Sharing Settings-->

Network Settings.webp
Note these Setting changes.

Next was to make sure SMB Share was installed. First search for Control Panel and hit Enter or click on it.

Control Panel.webp

Now once in the Control Panel, navigate to Programs and Features and Click on it.
Inside Control Panel.webp

Now on the left side of the screen there should be Turn Windows features on and off, click on that.
Turn Windows features on or off.webp

Next you scroll down to SMB Share making sure you check the box for all.
Windows Features.webp

Click on OK and wait for it to install, once installed you will be prompted to restart the computer. Restart the computer.

The next bit is for Windows 11 24H2 Home users. This will install the Group Policies Editor onto Home Edition.

Open an elevated Command prompt and enter the following (one at a time), wait until the first one had finished before doing the second command. Pressing Enter after each command has been pasted into the command prompt window.

Code 1:
Code:
FOR %F IN ("%SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientTools-Package~*.mum") DO (DISM /Online /NoRestart /Add-Package:"%F")

Code 2:
Code:
FOR %F IN ("%SystemRoot%\servicing\Packages\Microsoft-Windows-GroupPolicy-ClientExtensions-Package~*.mum") DO (DISM /Online /NoRestart /Add-Package:"%F")

CMD.webp
command one.webp
command two.webp

Once this has been installed you can now search for GPEDIT.MSC and hit Enter or Click on it.
Search for gpedit.webp

Next is for both Home and Pro users.

Once GPEdit is opened, you will need to navigate to the following things.

Computer Configuration--> Windows Settings--> Security Settings--> Local Policies--> Security Options

Double click on Microsoft Network Client: Digitally sign communications (always)

Double click on Microsoft Network Client: Digitally sign communications (if server agrees)

Set both of these to "Disabled"

Click on OK.
dig1.webp
dig2.webp

Now the final bit in GPEdit, you navigate to:

Computer Configuration--> Administrative Templates--> Network--> Lanman Workstation there will be 2 policies that need to be enabled.

Double click on Audit Insecure guest login--> Enable

Double click on Enable Insecure guest login--> Enable


Click OK on both.
lanman1.webp
lanman2.webp

Once that is all set you can goto file explorer and enter in the address bar for your server.

Like this: \\Server (or whatever name you have called it).

file explorer1.webp
file explorer2.webp

With a bit of luck you are able to access you home file server again. All of this took me about 20 minutes to complete.

Take the time and take it slowly and hopefully it will work for you.

I have also attached a PDF file of the same, if anyone wants to save and print it out.

Cheers,

Freck (Frecklesnoot)
 

Attachments

My Computer

System One

  • OS
    Windows 11 Pro 24H2 Build 26100.2605
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    AMD Ryzen 5 1600 Six-Core Processor
    Motherboard
    MSI B350M MORTAR ARCTIC (MS-7A37) 2.0
    Memory
    x2 Capacity: 4 GB Type: DDR4-2933 PC4-23466 Speed: 2800MT/s Model: TEAMGROUP-UD4-3000
    Graphics Card(s)
    NVIDIA GeForce GTX 980 VRAM: 3.99 GB
    Sound Card
    Realtek High Definition Audio
    Monitor(s) Displays
    Samsung 75 inch QLED 4K
    Screen Resolution
    3840x2160
    Hard Drives
    PC601 NVMe SK hynix 256GB Size: 256GB Partitions: 4 (Windows Installed)
    ST4000VN000-1H4168 Size: 4TB Partitions: 1
    WDC WD40EFRX-68WT0N0 Size: 4TB Partitions: 1
    ST8000AS0002-1NA17Z Size: 8TB Partitions: 2
    WDC WD40EFRX-68WT0N0 Size: 4TB Partitions: 1
    WDC WD30EZRX-00MMMB0 Size: 3TB Partitions: 1
    TOSHIBA DT01ACA300 Size: 3TB Partitions: 1
    ST2000DM001-1ER164 Size: 2TB Partitions: 1
    ST3000DM001-1CH166 Size: 3TB Partitions: 2
    PSU
    Corsair 850W RM850x 80+ Gold Fully Modular ATX
    Case
    N/A
    Cooling
    N/A
    Keyboard
    N/A
    Mouse
    N/A
    Internet Speed
    800mbps Down, 40mbps up, HFC Cable
    Browser
    Chrome / Firefox / Edge(not used, installed only)
    Antivirus
    Defender
    Other Info
    This machine is used as a media pc for watching tv shows and movies.

    Kodi is installed and used for media.

    This windows install is completely stock, not running any start menu or any other type of program to modify windows explorer or start menus. Only uninstalled pre installed apps.
There's no need to enable Group Policy Editor, as you can do this in PowerShell:
Code:
Set-SmbClientConfiguration -RequireSecuritySignature $false
Set-SmbClientConfiguration -EnableInsecureGuestLogons $true

Accessing a third-party NAS with SMB in Windows 11 24H2 may fail

You could probably collapse this procedure into a short PS script. Maybe something like:
Code:
Get-NetFirewallRule -DisplayGroup "Network Discovery" | Set-NetFirewallRule -Enabled True -Profile Any
Get-NetFirewallRule -DisplayGroup "File And Printer Sharing" | Set-NetFirewallRule -Profile -Enabled True -Profile Any

Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol -All

Set-SmbClientConfiguration -RequireSecuritySignature $false
Set-SmbClientConfiguration -EnableInsecureGuestLogons $true

Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Control\Lsa" -Name "EveryoneIncludesAnonymous" -Value 1 -Force
Set-ItemProperty -Path "HKLM:\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters" -Name "RestrictNullSessAccess" -Value 0 -Force

If you're in an non-English locale, the NetFirewallRule names for "Network Discovery" and "File And Printer Sharing" must be translated to your localized Windows equivalent.
 

My Computer

System One

  • OS
    Windows 7
Found some PS code I wrote a while back:
Code:
# Network Discovery, as expressed in any local Windows edition
Get-NetFirewallRule | where { $_.Group -match '-32752' } | Set-NetFirewallRule -Enabled True -Profile Any

# File and Printer Sharing
Get-NetFirewallRule | where { $_.Group -match '-28752' } | Set-NetFirewallRule -Enabled True -Profile Any
 

My Computer

System One

  • OS
    Windows 7
@garlin Some interesting scripts there mate, might have to investigate. It would save time.

Thanks mate

Cheers Freck
 
Last edited:

My Computer

System One

  • OS
    Windows 11 Pro 24H2 Build 26100.2605
    Computer type
    PC/Desktop
    Manufacturer/Model
    Custom
    CPU
    AMD Ryzen 5 1600 Six-Core Processor
    Motherboard
    MSI B350M MORTAR ARCTIC (MS-7A37) 2.0
    Memory
    x2 Capacity: 4 GB Type: DDR4-2933 PC4-23466 Speed: 2800MT/s Model: TEAMGROUP-UD4-3000
    Graphics Card(s)
    NVIDIA GeForce GTX 980 VRAM: 3.99 GB
    Sound Card
    Realtek High Definition Audio
    Monitor(s) Displays
    Samsung 75 inch QLED 4K
    Screen Resolution
    3840x2160
    Hard Drives
    PC601 NVMe SK hynix 256GB Size: 256GB Partitions: 4 (Windows Installed)
    ST4000VN000-1H4168 Size: 4TB Partitions: 1
    WDC WD40EFRX-68WT0N0 Size: 4TB Partitions: 1
    ST8000AS0002-1NA17Z Size: 8TB Partitions: 2
    WDC WD40EFRX-68WT0N0 Size: 4TB Partitions: 1
    WDC WD30EZRX-00MMMB0 Size: 3TB Partitions: 1
    TOSHIBA DT01ACA300 Size: 3TB Partitions: 1
    ST2000DM001-1ER164 Size: 2TB Partitions: 1
    ST3000DM001-1CH166 Size: 3TB Partitions: 2
    PSU
    Corsair 850W RM850x 80+ Gold Fully Modular ATX
    Case
    N/A
    Cooling
    N/A
    Keyboard
    N/A
    Mouse
    N/A
    Internet Speed
    800mbps Down, 40mbps up, HFC Cable
    Browser
    Chrome / Firefox / Edge(not used, installed only)
    Antivirus
    Defender
    Other Info
    This machine is used as a media pc for watching tv shows and movies.

    Kodi is installed and used for media.

    This windows install is completely stock, not running any start menu or any other type of program to modify windows explorer or start menus. Only uninstalled pre installed apps.
Found some PS code I wrote a while back:
Code:
# Network Discovery, as expressed in any local Windows edition
Get-NetFirewallRule | where { $_.Group -match '-32752' } | Set-NetFirewallRule -Enabled True -Profile Any

# File and Printer Sharing
Get-NetFirewallRule | where { $_.Group -match '-28752' } | Set-NetFirewallRule -Enabled True -Profile Any
On my laptop, File and Printer Sharing is -28502, not -28752. Running on 24H2 build 26100.2605.

EDIT:
Powershell:
Get-NetFirewallRule | Where-Object { $_.Group -match '(^@FirewallAPI\.dll,)(-32752$|-28502$)' -and -not $_.Enabled } | Set-NetFirewallRule -Enabled True -Profile Any
 
Last edited:

My Computers

System One System Two

  • OS
    11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Asus TUF Gaming F16 (2024)
    CPU
    i7 13650HX
    Memory
    16GB DDR5
    Graphics Card(s)
    GeForce RTX 4060 Mobile
    Sound Card
    Eastern Electric MiniMax DAC Supreme; Emotiva UMC-200; Astell & Kern AK240
    Monitor(s) Displays
    Sony Bravia XR-55X90J
    Screen Resolution
    3840×2160
    Hard Drives
    512GB SSD internal
    37TB external
    PSU
    Li-ion
    Cooling
    2× Arc Flow Fans, 4× exhaust vents, 5× heatpipes
    Keyboard
    Logitech K800
    Mouse
    Logitech G402
    Internet Speed
    20Mbit/s up, 250Mbit/s down
    Browser
    FF
  • Operating System
    11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Medion S15450
    CPU
    i5 1135G7
    Memory
    16GB DDR4
    Graphics card(s)
    Intel Iris Xe
    Sound Card
    Eastern Electric MiniMax DAC Supreme; Emotiva UMC-200; Astell & Kern AK240
    Monitor(s) Displays
    Sony Bravia XR-55X90J
    Screen Resolution
    3840×2160
    Hard Drives
    2TB SSD internal
    37TB external
    PSU
    Li-ion
    Mouse
    Logitech G402
    Keyboard
    Logitech K800
    Internet Speed
    20Mbit/s up, 250Mbit/s down
    Browser
    FF
You're right, -28752 is Remote Desktop. I copied the wrong line from my own example.
 

My Computer

System One

  • OS
    Windows 7
I just edited my post to make my RegEx expression more bulletproof.
 

My Computers

System One System Two

  • OS
    11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Asus TUF Gaming F16 (2024)
    CPU
    i7 13650HX
    Memory
    16GB DDR5
    Graphics Card(s)
    GeForce RTX 4060 Mobile
    Sound Card
    Eastern Electric MiniMax DAC Supreme; Emotiva UMC-200; Astell & Kern AK240
    Monitor(s) Displays
    Sony Bravia XR-55X90J
    Screen Resolution
    3840×2160
    Hard Drives
    512GB SSD internal
    37TB external
    PSU
    Li-ion
    Cooling
    2× Arc Flow Fans, 4× exhaust vents, 5× heatpipes
    Keyboard
    Logitech K800
    Mouse
    Logitech G402
    Internet Speed
    20Mbit/s up, 250Mbit/s down
    Browser
    FF
  • Operating System
    11 Home
    Computer type
    Laptop
    Manufacturer/Model
    Medion S15450
    CPU
    i5 1135G7
    Memory
    16GB DDR4
    Graphics card(s)
    Intel Iris Xe
    Sound Card
    Eastern Electric MiniMax DAC Supreme; Emotiva UMC-200; Astell & Kern AK240
    Monitor(s) Displays
    Sony Bravia XR-55X90J
    Screen Resolution
    3840×2160
    Hard Drives
    2TB SSD internal
    37TB external
    PSU
    Li-ion
    Mouse
    Logitech G402
    Keyboard
    Logitech K800
    Internet Speed
    20Mbit/s up, 250Mbit/s down
    Browser
    FF
Back
Top Bottom