Cannot access Samba share from Windows 8.1

I have recently upgraded from Windows 7 to Windows 8.1 on one of my home workstations. I have another machine running Ubuntu 13.10.

Prior to the update to windows 8.1 I was able to access the shares on Ubuntu (shared by right clicking on the folder -> Sharing Options), and currently other devices in the house can still access the shares (these are another Windows 7 device, Android devices, and even an old Windows XP device). All other devices I have can still access the shares. These shares have all been configured to Allow others to create and delete files in this folder and Guest access.

It's just this Windows 8.1 machine that while I can see the shared folders, trying to open one of them results in a Windows Network error message you do not have permissions to access...

I would think that since these are shared with Guest access, there should be no possible permissions that are getting in the way, and for the other devices i have, this seems to be true.

Also, all the folders involved in shares have permissions 777 applied through chmod. For this problem I've also found Nautilus right click permissions setting Create and delete files for all groups.

I've found articles around that talk about updating HKLM/System/Services/LanmanServer/Parameters/RequireSecuritySignature to 0 (which was already set to 0, BTW).

It seems silly that I should need to change my smb.conf file as ALL other machines access this share perfectly well, although I've found some that say Wins Support should be Yes and others that say it should be No. I've tried this with no change. The same error message about security still appears.

One thing that I'm sure of, is that Windows 8 made me use an email address and the login information from that address to be able to log into this system. Again though, the shares are set to allow guest access.

Below if the contents of smb.conf in case it helps.

#======================= Global Settings =======================
[global]
#
    workgroup = WORKGROUP
    server string = %h server (Samba, Ubuntu)
    wins support = yes
;   wins server = w.x.y.z
    dns proxy = no
    name resolve order = wins lmhosts host bcast
###
;   interfaces = 127.0.0.0/8 eth0
;   bind interfaces only = yes
###
    log file = /var/log/samba/log.%m
    max log size = 1000
    syslog = 0
    panic action = /usr/share/samba/panic-action %d
######
    encrypt passwords = true
;    passdb backend = tdbsam
    obey pam restrictions = yes
    unix password sync = yes
    passwd program = /usr/bin/passwd %u
    passwd chat = *Enter\snew\s*\spassword:* %n\n *Retype\snew\s*\spassword:* %n\n *password\supdated\ssuccessfully* .
    pam password change = yes
    map to guest = bad user
#########
#
;   domain logons = yes
#
;   logon path = \\%N\profiles\%U
;   logon drive = H:
;   logon script = logon.cmd
; add user script = /usr/sbin/adduser --quiet --disabled-password --gecos "" %u
; add machine script  = /usr/sbin/useradd -g machines -c "%u machine account" -d /var/lib/samba -s /bin/false %u
; add group script = /usr/sbin/addgroup --force-badname %g
#########
;   printing = bsd
;   printcap name = /etc/printcap
;    printing = cups
;   printcap name = cups
###########
;   include = /home/samba/etc/smb.conf.%m
;   message command = /bin/sh -c '/usr/bin/linpopup "%f" "%m" %s; rm %s' &
;   idmap uid = 10000-20000
;   idmap gid = 10000-20000
;   template shell = /bin/bash
;   winbind enum groups = yes
;   winbind enum users = yes
;    usershare max shares = 100
    usershare allow guests = yes
#======================= Share Definitions =======================
;[homes]
;   comment = Home Directories
;   browseable = no
;   read only = yes
;   create mask = 0700
;   directory mask = 0700
#
;   valid users = %S
;[netlogon]
;   comment = Network Logon Service
;   path = /home/samba/netlogon
;   guest ok = yes
;   read only = yes
;[profiles]
;   comment = Users profiles
;   path = /home/samba/profiles
;   guest ok = no
;   browseable = no
;   create mask = 0600
;   directory mask = 0700
[printers]
    comment = All Printers
    browseable = no
    path = /var/spool/samba
    printable = yes
;    guest ok = no
;    read only = yes
    create mask = 0700
[print$]
    comment = Printer Drivers
    path = /var/lib/samba/printers
;    browseable = yes
;    read only = yes
;    guest ok = no
;   write list = root, @lpadmin
;[cdrom]
;   comment = Samba server's CD-ROM
;   read only = yes
;   locking = no
;   path = /cdrom
;   guest ok = yes
#    cdrom share is accesed. For this to work /etc/fstab must contain
#    an entry like this:
#
#
#
#    is mounted on /cdrom
#
;   preexec = /bin/mount /cdrom
;   postexec = /bin/umount /cdrom
[DROP2]
    path = /media/jeff/Storage/DROP
    writeable = yes
;    browseable = yes
    guest ok = yes

Solution 1:

It's clear that it is a problem with the local security policy on the Windows 8 OS client machine.

In our enterprise we started by using our old GPO (the one we use for Windows 7 machines) for our Windows 8 machines. This instantly fixed it, but our security department weren't happy and didn't allow us to roll it out to all Windows 8 machines, so then we started cutting away at our policy and the deciding factor for us was the following setting:

In "control panel" go to "administrative tools" open "local security policy", then "local policies" -> "security options"

Microsoft network client: Digitally sign communications (always) - Set to Disabled Microsoft network client: Digitally sign communications (if server agrees) - Set to Enabled

This fixed it for us, but if it doesn't help for you try opening up other restrictions in "local security policy" for the client machine and test your connection to the Samba shares.

Good luck, I hope I help someone:)