Watch out — upgrading to Windows 11 24H2 could brick your NAS or storage device

News
By
published

Windows 11 is introducing a strict new change that could hit NAS devices hard

A laptop on a desk with the Windows 11 background on its screen.
(Image credit: Microsoft)

Microsoft Principal Program Manager Ned Pyle has issued a warning to those running the Release Preview version of Windows 11 24H2, stating the OS could brick your NAS devices for failing to identify its credentials.

Newly introduced tightened security measures could affect some third-party NAS devices and USB drives plugged into certain routers.

As part of the update, Windows 11 will now require SMB signing by default on all connections, which poses a problem to incompatible or poorly set-up devices.

Windows 11 24H2 NAS safety measures

In a post, Pyle explained that the guest fallback feature, which allowed users to connect to an SMB server without a username or password, posed a severe security risk: “it means that your device can be tricked into connecting to a malicious server without prompting for credentials, then given ransomware or having your data stolen.” It has been disabled on Windows 11 Pro edition.

While SMB signing has been available in Windows for decades, its mandatory implementation is new. Pyle added: “Both changes will make billions of devices - not just Windows, but everything running SMB that wants to talk to Windows - more secure.”

However, Microsoft realizes that the changes could see some users encounter issues when upgrading to Windows 11 24H2, as the system won’t be able to differentiate between a malicious server and a genuine NAS device.

Users experience access issues may see various error messages, ranging from standard security notifications to obscure system errors.

Pyle urges NAS users to ensure that SMB signing is enabled, to disable guest access, to enable username and password protection and to apply firmware upgrades in order to circumvent the new restrictions.

A new inbox, wontsignsmb@microsoft.com, has also been set up for consumers to share details of NAS devices that don’t support SMB signing in order to pressure vendors for updates.

More from TechRadar Pro

Craig Hale
Craig Hale

With several years’ experience freelancing in tech and automotive circles, Craig’s specific interests lie in technology that is designed to better our lives, including AI and ML, productivity aids, and smart fitness. He is also passionate about cars and the decarbonisation of personal transportation. As an avid bargain-hunter, you can be sure that any deal Craig finds is top value!