How to Fix “You can’t access this shared folder because your organization’s security policies” in Windows 11 Easily

Shared Folders is an important feature in Windows that allows users to share files and folders on a local network (LAN). With this feature, other users with permissions can access, edit, or copy files from shared folders.

However, sometimes users encounter the error “You can’t access this shared folder because your organization’s security policies”. This message indicates that your organization’s security policy or Windows settings block guest access to the shared folder.

This issue often appears in Windows 11, especially after Microsoft tightened security policies related to the SMB (Server Message Block) protocol. So, what are the main causes of this error, and how can it be fixed? Check out the full guide below!

Main Causes of “You Can’t Access This Shared Folder” Issue

The “You Can’t Access This Shared Folder” issue is common due to several factors, mainly related to changes in SMB protocols, security policies, and network access settings. Here’s the explanation:

1. SMB1 is disabled by default

Microsoft has disabled SMB1 starting with the Windows 10 Fall Creators Update (version 1709 and later) to improve security. SMB1 protocol is considered non-standard and vulnerable, so it can be exploited by malicious software such as WannaCry. While considered insecure, SMB1 still needs to connect with older devices, such as routers that support file sharing or NAS (Network Attached Storage).

2. SMB2 Not Yet Activated

Once SMB1 is disabled, SMB2 should be the standard protocol. However, in some situations, SMB2 may not be activated correctly.

You can check the status of SMB2 via PowerShell with the following command:

Get-SmbServerConfiguration | Select EnableSMB2Protocol

If the result is “False”, you need to enable SMB2 with the command:

Set-SmbServerConfiguration –EnableSMB2Protocol $true

3. Organizational Security Policy

Security policies in organizations typically restrict access for unauthenticated guests. This is done to keep the computer safe from potentially dangerous or unsafe devices on the network. These settings can be changed via Group Policy Editor or Registry Editor.

How to Overcome “You Can’t Access This Shared Folder”

If you get the error message “You can’t access this shared folder because your organization’s security policies”, it means that Windows has restricted unverified guest access to Shared Folder.

One solution to solve this problem is to change the settings in Group Policy Editor or Registry Editor so that guest access is allowed. Here are the steps:

Solution 1: Using Group Policy Editor

Group Policy Editor (gpedit.msc) is a built-in Windows tool that allows users to change various system policies, including network access policies.

Steps to enable guest access via Group Policy Editor:

1. Open Group Policy Editor by pressing the Windows + R keys on the keyboard to open the Run. Then, type gpedit.msc and press Enter.
2. Navigate to the following settings:

Computer Configuration > Administrative Templates > Network > Lanman Workstation

3. Click on the Lanman Workstation folder.
4. In the right panel, look for the Enable insecure guest logons policy.
5. Double-click Enable insecure guest logons to open the settings window.
6. Select the Enable option, then click Apply and OK.
7. After making changes, restart your computer for the settings to apply and try to access Shared Folder again to see if the problem is resolved.

Solution 2: Using Registry Editor

If you still get the error message “You can’t access this shared folder because your organization’s security policies”, you can try changing the settings in Registry Editor.

Before making changes in the Registry, it is recommended to create a System Restore Point first to avoid the risk of system errors due to unwanted changes.

Steps to Use Registry Editor:

1. Press Windows + R, type regedit, and then press Enter.
2. Navigate to the following location:

Computer\HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows

3. Find the folder named LanmanWorkstation inside the Windows folder. If LanmanWorkstation doesn’t already exist, create a New > Key with the name LanmanWorkstation.
4. Right-click on the LanmanWorkstation, select New >  DWORD (32-bit) Value, give it an AllowInsecureGuestAuth.
5. Double-click AllowInsecureGuestAuth, change Value Data to 1 and then press OK.
6. Restart your PC and try to access the Shared Folder again.

Risk & Safety

Enabling guest access on Shared Folder on Windows can be a quick solution to solve the problem of blocked access. However, this step carries a great security risk. Without clear authentication, anyone on the same network could access the folder, increasing the likelihood of data leaks or cyberattacks. This is especially dangerous on unsecured networks, such as public Wi-Fi or workplaces without additional protection.

In addition to the risk of data leaks, unauthenticated guest access can also open up opportunities for the spread of malware or ransomware. Attacks such as Man-in-the-Middle (MITM) can occur, where hackers break into the network and steal important information through Shared Folder. Therefore, it is highly recommended to only enable this feature if necessary and in an environment that is already protected with a firewall and strong data encryption.

As a safer alternative, we recommend using a user account with valid credentials to access Shared Folder. This way, only certain users with permissions can access the folder, minimizing security risks. Users can also set access levels, such as allowing only read-only for multiple accounts so that files cannot be changed or deleted carelessly. With this step, data security is maintained without sacrificing accessibility in the network.