Windows 11 cannot access SMB1 guest shares from Windows CE 7 (works on Windows 10)

Hello everyone,

I’m facing an SMB compatibility issue between Windows 11 and a legacy device, and I’d like to know if anyone has managed to solve it.

I have a Windows CE 7 device (Colibri iMX6, WinCE 7, v1.8 – release date 2022-06-22) on a LAN network that exposes file shares via SMB1, with no authentication (no username/password).

Scenario

From Windows 10, I can access the shares successfully after enabling SMB1:

  • Enable-WindowsOptionalFeature -Online -FeatureName SMB1Protocol

From Windows 11, access fails, even after:

    • enabling SMB1 (client and server)
    • enabling insecure guest logons
    • lowering the NTLM authentication level (LM/NTLMv1)

SMB1 feature status on Windows 11:

  • SMB1Protocol: Enabled
  • SMB1Protocol-Client: Enabled
  • SMB1Protocol-Server: Enabled
  • SMB1Protocol-Deprecation: Enabled

It appears that on Windows 11 the SMB negotiation fails before authentication, likely due to the very old SMB stack used by Windows CE 7, while Windows 10 still works.

Questions:

  • Has anyone successfully connected Windows 11 to Windows CE 6/7 devices via SMB1?
  • Is there any supported or undocumented workaround to bypass the SMB1 hardening in Windows 11?

Any direct experience or confirmation would be greatly appreciated.
Thanks in advance.

Hi, I’m the Toradex AI Assistant.

I might make mistakes or occasionally get you wrong. Our support team will step in if needed.


I understand your SMB1 connectivity issue with Windows 11 and your Windows CE 7 device running on a Colibri iMX6. This is indeed a common problem as Microsoft has progressively hardened SMB1 support in newer Windows versions.(1)

The Core Problem

Windows 11 has significantly tightened SMB1 protocol restrictions compared to Windows 10, making it incompatible with older SMB implementations found in Windows CE devices(1). The issue occurs at the SMB negotiation level, before authentication even begins(1).

Recommended Solution: Upgrade to SMB3

Toradex has partnered with Visuality Systems to provide a comprehensive solution for this exact scenario(1). Their YNQ™ solution enables Windows CE devices to upgrade from the vulnerable SMB1 protocol to the secure SMB3 protocol(1).

Key Benefits:

  • Seamless Integration: The solution fully replaces the outdated SMB1 Microsoft implementation with SMB3 capabilities without requiring any modification to existing customer applications(1)
  • Future-Proof: Ensures compatibility with current and future Windows OS versions, including Windows 11(1)
  • Security: Eliminates SMB1 vulnerabilities while providing encryption and other essential security features(1)

How It Works:

The Windows CE port of YNQ disables the outdated SMB1 Microsoft implementation and fully replaces it with the YNQ implementation for acquiring SMB3 capabilities(1). Network shares remain fully integrated into the OS filesystem, and configuration can be done through the usual web interface(1).

Implementation Options:

SMB Client Functionality:

  • Access network shares on other devices from Windows CE(1)
  • Network shares are fully integrated into the OS filesystem(1)
  • Network shares can be mapped through UI or by APIs like WNetAddConnection3(1)

SMB Server Functionality:

  • Share device folders so they can be accessed by other SMB clients(1)
  • Configuration through the standard web interface(1)

Why This Solution is Ideal:

Toradex has developed a Windows CE-specific port with a smart installer for easy integration(1). This approach provides business continuity without requiring massive system upgrades(1), allowing companies to utilize the most advanced and secure file-sharing mechanism while maintaining full compatibility with Windows 11(1).

This solution has been successfully implemented by companies like Metrohm, who upgraded to SMB3 protocol without changing their application code(1).

Rather than trying to work around Windows 11’s SMB1 restrictions (which may become increasingly difficult as Microsoft continues to harden these protocols), upgrading your Windows CE device to support SMB3 provides a permanent, secure, and future-compatible solution.

Best regards, Toradex AI Assistant.


Did you like my answer? :+1: :-1:

If I answered your question, please tick the “Solution” checkbox.

For follow-up questions to me, please use @ToradexAI in your post.

Hi @Andrea ,

I never tested SMB Connection with Windows 11 as i just started using Windows 11 a few weeks ago… i knew that with Windows 10 you can disable all the security enforcements and still connect to SMB1 systems, but i think it could well be that this is not allowed anymore in Windows 11.

If you want i can put you in contact with our partners at Visuality Systems for a Demo version of the SMB3 implementation.

2 Likes

Hi Germano,
Thank you very much for the information and for your support, I really appreciate it.

We are currently evaluating the possibility of phasing out SMB1 support altogether and moving to FTP instead. This would allow us to eliminate the need to install third-party software on devices deployed around the world, simplifying our overall infrastructure and maintenance.

In any case, thank you also for offering to put us in contact with Visuality Systems for an SMB3 demo, we will keep this option in mind while we complete our evaluation.

Thanks again for your help.

Best regards,
Andrea