Same problem all the share in the local area network are lost, unable to connect to any share, this problem is caused by some windows updates named : KB5064081 and KB5065426, sometimes solved by removing it.
Microsoft - wake up and fix this issue!
This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I was having issues with multiple locations using windows file and print sharing with password sharing. I found windows update KB5065426 was installed and that my file and print sharing options were turned off. I also found that networks were set to public that had previously sent to private.
Even after setting the settings back, the computers would not working with file and print sharing and I had to uninstall the update to get the functionality to work.
Morning. This same issue happened on my sites. the ONLY way to make it working again is to uninstall the kb5065426 update. Even after doing as mentioned above, the issue persists.
This is something that needs to be avoided in regards to we who have large sites/organizations that we need to run.
Please let us know if there is a fix for this. the stress is through the roof at the moment.
There are thousands of computers in the company Sharing files and printers this way is causing chaos after the KB5065426 update! Help! Microsoft - wake up and fix this issue!
After installing this package, when I try to access a shared folder, the system asks for a login and password. I enter the credentials in the format server\username and the correct password, but Windows keeps showing an error: "The username or password is incorrect." I am sure the credentials are 100% correct. This seems to be a Windows issue.
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
We are experiencing the same issue and the fault is definitely rooted in the SID. Two machines with the same SID can't authenticate. Our solution is to create a new Windows User, which also get's a new SID. Or reset the current user with "Sysprep".
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
Microsoft deberia revisar esto, no se puede permitir tal error.
Yeeay man the problem is the same SID.
THANKYOU
I have the same problema here. With a lot of PCs
Adding a new user the SID remains the same, exception the latest four digit that increase but are UNUSEFUL to solve the SHARE problem that remains because all the inital characters of the SID are the SAME for ALL the new users yet create.... last four digits are 1001-1002-1003 for each new user you will add. So problaby the MASTER part of SID it is create by OS during installation prcedure.
Removing it worked for me! Many thanks!
I have same issue with KB5065426. I have tried all the suggestions and to no avail. the only solution at this point is to remove the update.
For those that do not that savvy about windows, be aware that you do not want to do use the recovery option, you want to go to update history and scroll down to the related setting section and click on uninstall updates. here a list of the recent updates will appear. they will be sorted by date and newest may be on the top but not always. Pay Attention to the dates and look for KB50655426
but if you do not pause the updates, it will reinstall it within hours in my case. i have paused updates for as far out as you can, seems different computers offer different lengths you can do this.
hope fully in the next couple of weeks Microsoft will have a new update that fixes this issue.
Facing this exact issue on two (non-preview now) system at home, one was cloned from the SSD of the other and I just changed the name and Windows license etc and has been working fine for years until now...all file/printer sharing and RDP is dead, just keeps saying incorrect user/pass. All the normal stuff is verified, private network, sharing on, etc etc and certain it is due to the update plus same SID as follows:
I verified both machines do have the same SID.
I tried uninstalling KB5065426 from both systems but that did not resolve.
Next I removed KB5064081 from both systems and reboot and now SMB/RDP is working normally again.
In my process of troubleshooting I found that the Remote Desktop Classic Windows app actually still worked also but, the regular RDP would not, so the RDP Classic app must authenticate differently? I'm not sure if you can even get or install this still since the newer "Remote Desktop" app is depreciated and maybe not working at all.
I am considering trying SIDCHG on one of them as a long term solution since I assume Microsoft will not make any attempt to revert this dispite what will likely be millions of impacted systems. Please us know if you tries SIDCHG and any problems or side effects or other issues are encountered.
This update has killed the Samba 1 share on my Buffalo Link station NAS, on two different machines. Tried everything but only uninstalling this update has worked.
The update is now not removable. It is part of the OS and cannot be uninstalled now. I have 3 duplicate SIDs because I bought computers from china that were cloned. I need a SID changer or reload the OS from scratch to fix my issue. It is not an SMB 1.0 or any SMB issue. Microsoft has blocked duplicate SIDs from being able to communicate with each other.
hola!! el problema persiste por mas de que elimine la actualizacion o haga lo que considere medianamente bien, pero seguimos con el problema. dos equipos con el mismo problema con actualizaciones todos los dia.
After install that update "KB5065426" I get two laptop with BitLocker enable that now is asking for the recovery key every time is turn on the laptop and it doesn't matter if you enter the recovery key it keep asking for the key.
The only way is if you hit "skip" Windows boot and try to repair the Bitlocker but ending asking for the recovery and after enter the key Windows come up but the problem stay.
Here is a solution I found. I did use SIDCHG (https://www.stratesave.com/html/sidchg.html)
Step 1. Uninstall any antivirus, then disable Defender
Open Windows Security → Virus & threat protection.
Under Virus & threat protection settings, click Manage settings.
Toggle Real-time protection → Off.
Step 2. Run SIDCHG from CMD prompt as Admin.
sidchg64-3.0m.exe /R
You can use trial key (78@5i-QwUJM-woQEE-Kv). Verify on their web site as it may change.
Step 3. Reboot then reinstall antivirus.
Note: I checked SID before and after using Power Shell:
(Get-CimInstance Win32_UserAccount -Filter "Name='$env:USERNAME'").SID -replace '-\d+$',''
This worked for me for 2 clients, good luck!
We also have major issues with this update. It stops certain software being run from mapped drives and breaks some of our printers. The fixes suggested do not make any difference on our system and we don't have duplicated SIDs.
We're having the same problem on two computers. They haven't been cloned, but they have the same SID. I tried with a new user with a different SID, and the problem persists.
The problem is since the installation of kb5065426
I removed the patches on three computers and something triggered that the patches are no longer removable even using powershell. Microsoft throws an error that the patches are now required and cannot be removed.
I have been having problems on two networks. First started on one printer sharing stopped working, \computername asked for password, entered uname and password. Said password was wrong, I knew it wasn't. Today another network called with file sharing issues. After numerous hours looking for a solution, I began looking at windows update and discovered that some computers had received KB 5065426 and some had not. I decided to remove it and file sharing came back. I then went directly to the network with the print sharing issue, and removed that update and printing was restored. I know we are supposed to keep things safe for the clients, but honestly, nothing working is not the answer. Find another way Microsoft, cause this is not helping anyone. I now have clients that are asking me to get them away from Microsoft products.
We are facing the same issue. workstations has different SIDs.. uninstalling the update using command 'wusa /uninstall /kb:5065426' solved the file sharing issue.
hope that Microsoft will urgently provide another update solving the issue as SMB and file/ print sharing are very important for organizations
The exact same issue occurs on Windows 10 with update KB5065429, and the above "Answer" doesn't work on that either.
just published on https://www.bleepingcomputer.com/news/microsoft/microsoft-says-windows-september-updates-break-smbv1-shares/ Microsoft is now working to resolve this issue, and until a fix is available, it has provided impacted customers with a temporary workaround.
This requires them to allow traffic on TCP port 445, which will cause the Windows SMB connection to resume successfully by switching to using TCP instead of NetBT.
read article for more details. but even though it says SMB1 I think it affects SMBv2 also.
i removed the update and am going to pause updates until the fix comes out.
I already have port 445 open and it doesn't help.
I uninstalled the kb:5065426 via powershell on my laptop and mini, that I use as a server with all of my hard drives attached to. I can't connect to the computer or the hard drives, but I can connect to my mini computer via RDP. Any ideas how to get back to my mini computer?
Update has reinstalled and now even using that command doesn't uninstall update.
try to run:
'sfc /scannow' then 'dism /online /cleanup-image /restorehealth'
me too, i have de same problem now
DFS Replication for me also broke after installing this update
Just to update on our situation within our environment. ctl3d32.dll was the culprit for our issues as KB5065426 removes the file from the windows system folder / folders. This stopped our revelation database system from working.
So at first we were thinking it was a DNS issue but it is related to the update. A workaround that seems to be consistently working is to map the drives by IP address vs. name.
Removing the update does require a sfc /scannow to be run on almost every machine we have removed the update from.
Hi,
Do someone has tried to create a new rule in the Windows Defender Firewall with Advanced Security under Inbound Rules and Outbound Rules for the port 445 to give full access to that port and force Windows to allow the file and print sharing?
That problem resembles the same situation when that port is blocked in the firewall.
Was unable to successfully uninstall KB5065426 on my server - located and initiated an update removal, after reboot the update still shows up, Unable to initiate another update removal. Forced to perform workarounds to access my business data.
Will be installing Linux for evaluation, this is untenable.
uninstalling this KB fixes event id event id 6167 when mapping a drive...
When this updated on windows 11?
I'm seeing more and more computers experiencing this problem. What's the solution?
I'm also having trouble creating Linux shares in Windows 11.
I keep getting error: 0x80070043.
I've tried everything, unfortunately, without success.
Ping to Linux works fine, and from Linux, I see the share on Windows 11.
So, there's an error creating the shares from the Linux PC to Windows 11.
I hope Microsoft fixes this soon.
any update from october 2025 can solve the issue. i need to reimage a lot of device from many site since the update cannot uninstall.
https://www.askwoody.com/forums/topic/ms-defcon-4-finally-24h2/#post-2814835 See if the September updates help
I am no expert but I undestand the problem is with duplicate machine SIDs (not duplicate user IDs) which is why you are still having this problem. The machine SID is the user SID after the last "-" and any numbers after that are removed.
I check machine SIDs in Powershell with the command "Get-LocalUser | Select-Object Name,SID" (without quotes and ignore the SID result from the last dash onwards).
Same problem all the share in the local area network are lost, unable to connect to any share, this problem is caused by some windows updates named : KB5064081 and KB5065426, sometimes solved by removing it.
Microsoft - wake up and fix this issue!
i have lost hours trying to fix this issue i uninstalled this idiotic Kb file none of my printers work, i have reinstalled drivers, i have logged in on a different profile to check and the same issue,,,, what a poor and sad story Microsoft.... still battling this out probably have to restore windows as DISM and sfc dont do anything either... pathetic
I was able to fix it today by using pressing the "Reinstall now" button in the "Fix problems using Windows Update entry, which is in Settings, System, Recovery.
Since KB5065426 had broken file and printer sharing, I had applied further updated and enabled 25H2, so uninstalling was not an option. It took a little while to download and install, and about half an hour of shutdown and reboot, but after that was back up and running with no obvious changes to any other behaviour.
Hi Kevin OBrien,
Thank you for reaching out regarding the issues you experienced with file and print sharing after installing Windows Update KB5065426. We understand how critical this functionality is for your workflow, and we appreciate your patience.
FYI, the KB5065426 update introduced security enhancements that:
As a result, even after re-enabling sharing settings, connections may fail if these new security requirements are not addressed. Removing KB5065426 restores functionality but also removes important security fixes.
Here a step-by-step guide to address the issue without removing the KB5065426 update, please kindly follow:
1 - Set Your Network to Private
2 - Turn On Sharing Features
3 - Allow Guest Access (If needed)
For Windows Home:
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters4 - Check SMB Settings
If older devices require it, enable SMB 1.0/CIFS File Sharing Support:
5 - Restart All Devices
I look forward to receiving your update and I'm willing to collaborate with you till we resolve the issue. Please keep me informed.
What you suggest up there, the step by step? I had my IT out here and also Support what I thought was my Accounting Software glitch from 7 am until 3 pm when (and I thought this from the very beginning) we said, why not just uninstall it. We did everything you said up there multiple times and nothing worked but uninstalling that update.
tried that it still does not work I have several Location with this problem
Hello Kevin OBrien,
Just checking in to see if the above information was helpful. If you have any further updates on this issue, please feel free to post back. If the answer is helpful, please click "Accept Answer" and kindly upvote it. Accepting an answer helps us track the effectiveness of our support efforts.
These are the first steps I tried, although I will not use SMB 1.0 or guest accounts.
It appears to be an issue with matching SIDs from cloning computers.
I did every step (except guest access) and still it does not work. :(
Check sid, the matter is repeat of sid of two copmuters
Thanks Hendrix-V, We have several sets of computers (LANs) that are affected by this. I tried it on the first set of computers on a LAN and it worked. But doing it on our other systems and it did not work.
We also have major issues with this update. It stops certain software being run from mapped drives and breaks some of our printers. The fixes you've suggested do not make any difference on our system and we don't have duplicated SIDs.
This comment has been deleted due to a violation of our Code of Conduct. The comment was manually reported or identified through automated detection before action was taken. Please refer to our Code of Conduct for more information.
I have tried all of this and I still cannot connect to my Buffalo Linkstation HD-H240LAN NAS device, which only supports SMB1. This happens on both a Windows 10 machine (following update KB5065429) and a Windows 11 machine (following update KB5065426). In both cases, uninstalling the update fixes the problem.
Had the same issue, only uninstalling the update worked
This didn't resolve my inability to access 'WDMYCLOUD' devices
We tested this on three domain-joined Windows 11 clients: two clients have the update KB5065426 installed, and one client does not.
When we ran Get-SmbClientConfiguration on the three clients:
EnableInsecureGuestLogons : False.EnableInsecureGuestLogons : True.We changed EnableInsecureGuestLogons from False to True on the two clients with the update installed, then tested access to the shared folders.
The error persisted — the login credentials prompt still reported wrong password. We also tried on different domain users.
Any feedback you can provide would be appreciated.
Hi Kevin OBrien,
Thank you for clarifying, that’s an important detail. If the issue persists even after restoring sharing settings and avoiding SMB 1.0 or guest accounts, and you suspect SID duplication from cloned systems, that points to a trust and authentication mismatch rather than just a network profile reset.
Here’s what you can do:
1 - Check for Duplicate SIDs
PsGetsid.exe
2 - Regenerate Unique SIDs
sysprep /generalize /oobe /shutdown
3 - Rejoin Workgroup or Domain
4 - Verify Sharing After Reset
Please keep me informed on the issue.
Thanks!
For the Buffalo NAS can you see if this helps? https://github.com/adricist/Buffalo-NAS-SMBv2-Patch
I've completed all above steps but not resolved
The Buffalo Link Station is an older model, HD-H240LAN, which is SMB1 only. (SMB1 has been enabled, and all of the above recommended steps taken). Same problem on both Windows 11 and Windows 10 (different update KB number), fixed in both cases only by rolling back the most recent update.
I have two Windows 10 computers (not clones) that were individually updated from Windows 10 to Windows 11. I uninstalled the update and followed the steps given above, performed numerous cold boots. Access to shared files worked briefly yesterday but not today, files sent to the printer only printed after a computer cold boot.
If you are on a Domain Network you CAN"T change your Network setting to Public or Private. The file sharing issue shows up in Domain networks as well. I HAVE NOT FOUND ANY WAY TO FIX IT OTHER THAN REMOVING THE SECURITY UPDATE.
Hi Hendrix- I’m on windows 11 pro and both machines on same lan network used to share files without any password needed. I had it off. I’ve already checked steps 1 to 3 in your comment above and I’m still getting the windows security asking for a pin or password and it won’t accept the right pin or password. This is so frustrating as we use QUICKBOOKS and it’s stored on 1 pc and I have to access that pcs PUBLIC folder which is shared and was working fine up until around 9/8/25. It seemed that update messed it up. Can you assist me in getting this resolved ? Any help is greatly appreciated!! Thank you.
I have another issue where it knocked out the SQL server agent and ACT program won’t load now. Happened around the same time 9/8/25. That’s on a home pc which my wife uses and we’re about to transfer over to the new act. Cant now.
I have a few machines on a work group. my win 11 pro is used for all backups via sync for some active stuff and via back up on others. some can login to shared drives no problem, others can not. Checked the sids via psgetsid. they are different. The affected machines are win 10 pro. Yet some others work fine. if i use remote desktop it works for manually cutting and pasting but its been a lot of work reconfiguring the broke stuff and all the manual copying. Is there going to be a fix soon. or a work around that works? Anyone? What are the big company's doing?
This worked for me, as long as only 1 end of the connection had the update in place. Before doing this if the receiving end of the connection had the update installed, then the connection failed regardless. Now the connection works unless both machines in question have the update in place; in that case, the problems still exist.
The above solutions DO NOT WORK if the machines have identical SIDs. After the 24H2 update two working machines now fail SMB sharing and unless the SID of one is changed they will never work regardless of what anyone does. The vendor sent me two identical machines with cloned drives having identical SIDs. I now have to take one of them out of service, return it to the vendor to have it re-imaged or resort to some very destructive tools such as SIDCHG or sysprep that may destabilize it forever. Based on the amount of time I've lost due to Microsoft's wrecking ball I would have been better off simply replacing one of the machines and selling the one with the duplicated SID on eBay. MS provides a group policy work-around for the enterprise customer but it's left the rest of us "insignificant" customers with broken networking. This is proving to be a very costly error. If the objective was to increase SMB security MS certainly accomplished that goal: An SMB share that NO ONE CAN ACCESS is very secure.
just do the windows updates again microsoft has fixed this issue. https://www.msn.com/en-us/news/other/major-windows-11-update-bugs-fixed-with-a-new-release/ar-AA1ORmtZ?ocid=msedgntp&pc=U531&cvid=68fa378b694346c796f34df3d93cc2a0&ei=29
No Microsoft have not fixed it. My affected machines have the '0773 kb and they still fail to share via SMB and still produce event log SMB errors related to duplicate SIDs.
This article, dated after the '0773 kb, admits the problem persists.
The only solution is for enterprise customers and I read this morning that someone contacting them for the group policy work-around linked to in the above claimed it didn't exist.