Establishing local file sharing between computers on a home or office network is a challenge faced by almost every Windows 10 user. The ability to quickly transfer gigabytes of data without external drives significantly saves time and simplifies working with multimedia content. However, the system's default security settings often block connection attempts, requiring a thorough understanding of network protocols.
In this article, we'll take a detailed look at setting up shared access, focusing on hidden Group Policy settings and the specifics of the SMB protocol. You'll learn not only how to open folders for reading but also how to set up a fully-fledged network storage system with access rights for different users.
Before configuring software settings, ensure the physical connection is intact. If your devices are on different subnets or have conflicting static IP addresses, no Windows settings will help establish communication. Ensure all computers can see each other in the basic network environment.
Preparing the network infrastructure and checking the connection
The foundation for successful file sharing is a properly configured network profile. By default, Windows 10 classifies new connections as "Public Network," which automatically hides your computer from detection by other devices. You need to switch this status to "Private Network" to allow local data sharing.
To perform this procedure, open the Options menu using the keys Win + I and go to the "Network and Internet" section. Depending on your connection type (Wi-Fi or Ethernet), select the appropriate subsection and click the name of your active network. In the settings window that opens, change the profile from "Public" to "Private."
- 📡 Make sure all devices are connected to the same router or switch.
- 🔒 Check that Windows Firewall is not blocking incoming connections in the private profile.
- 🆔 Write down the IP addresses of your devices, as name-based access may not work reliably in some configurations.
After changing the profile, the system will apply less stringent traffic filtering rules, allowing computers to "see" each other in the network environment. However, this is only the first step; the file sharing protocol itself can still be disabled at the service level.
It's worth noting that in corporate networks, administrators can force the "Public" profile through domain group policies. In this case, manually changing the profile will be impossible or ineffective without domain administrator rights.
Setting up sharing options in Control Panel
The central hub for managing Windows networking features is the "Advanced Sharing Settings" panel. This is where the key mechanisms for sharing a folder and making it visible to other users on the local network are activated.
To access this section, open the Control Panel (you can find it by searching on the Start button) and select "Network and Internet," then "Network and Sharing Center." In the left menu, select "Change advanced sharing settings."
In the window that opens, you'll see several profiles: "Private," "Guest or Public," and "All Networks." We're primarily interested in the "Private" profile. Expand it and ensure the following options are enabled: "Turn on network discovery" and "Turn on file and printer sharing."
⚠️ Note: Enabling the "Enable Public Folder Sharing" option allows you to share the Public folder, but this setting is not required for sharing arbitrary directories and can be disabled for security reasons.
Next, go to the "All Networks" section. Here, it's crucial to configure the "Password-protected sharing" setting. If you're in a trusted home environment, you can disable this setting, allowing you to connect to your resources without entering a username and password. In an office environment or if you have sensitive data, it's best to leave this feature enabled.
After making all changes, be sure to click the "Save Changes" button at the bottom of the page. The system will apply the new firewall rules and update network services.
How-to: How to Share a Folder
Now that the network infrastructure is ready, you can begin accessing a specific directory. This process involves two steps: configuring the "Access" tab and adjusting NTFS permissions at the file system level.
Find the folder you want to share, right-click it, and select "Properties." Go to the "Sharing" tab and click "Advanced." In the window that opens, check the box next to "Share this folder."
The "Share Name" field will default to the folder name, but you can change it to anything you like for network identification. Below that is the "Permissions" button, which controls access rights for network users. By default, the "Everyone" group is set to read-only.
- 👁️ The "Read" permission only allows users to open and copy files.
- ✏️ The "Edit" permission allows you to edit, delete, and create new files within the folder.
- 🔑 "Full Control" permission provides unlimited control, including changing access rights to the folder itself.
After setting the permissions in this window, click "OK," but don't close the folder properties. Now go to the "Security" tab. This is where you'll find the local NTFS permissions. If the "Everyone" group or the specific user you granted access to isn't listed in the list of groups and users, click "Edit" -> "Add."
In the input field, write All (or Everyone (If the system is in English) and click "Check Names," then "OK." Select the added group and in the bottom list of permissions, check the boxes for the required actions (usually "Read and Execute," "List Folder Contents," or "Read").
☑️ Folder setup checklist
It's important to understand the difference between Share permissions and NTFS permissions. When connecting to a resource, the system applies the more restrictive of the two sets of rules. Therefore, there's no point in granting "Full Control" in network permissions if it's denied at the file system level.
Troubleshooting SMB 1.0 Protocol Issues
One of the most common reasons why modern Windows 10 computers can't see older network-attached storage (NAS) devices or Windows XP/7 computers is because the SMB 1.0 protocol is disabled by default. Microsoft disabled it for security reasons following the ransomware outbreak, but it may be necessary in isolated home networks.
To enable this component, click Win + R, enter optionalfeatures and press Enter. In the "Windows Features" window that opens, find the line "SMB 1.0/CIFS file sharing support."
Expand this section and ensure that the "SMB 1.0/CIFS Client" and "SMB 1.0/CIFS Server" subsections are checked. If you only need to connect to legacy devices, the client is sufficient. However, if you need to connect legacy systems to your computer, you need the server.
| Component | Function | Necessity |
|---|---|---|
| SMB 1.0/CIFS Client | Allows connection to older NAS and PCs | High (for compatibility) |
| SMB 1.0/CIFS Server | Allows older PCs to connect to Windows 10 | Low (security risk) |
| SMB 1.0/CIFS Automatic Removal | Automatically deletes the protocol when idle | Average |
⚠️ Warning: SMB version 1.0 has known vulnerabilities. Enable it only if you are absolutely sure your local network is secure and there is no direct access from the internet.
After installing the components, you will need to restart your computer. Without this step, the changes will not take effect, and network services will not be able to use the updated protocol stack.
Why did Microsoft disable SMB 1.0?
The SMBv1 protocol was developed in the 1980s and lacks modern encryption and packet signing mechanisms. The WannaCry virus exploited the EternalBlue vulnerability in this protocol to spread across networks.
Connecting to a network folder and mapping a drive
Once a folder is shared on one computer, it needs to be mounted on another device. The easiest way is to open File Explorer, go to the "Network" section, and find the name of the server computer. However, this method is often unstable due to the nature of the discovery service.
A more reliable method is to connect directly using the IP address. Find out the IP address of the computer where the shared folder is located (command ipconfig (in the command line). Then, in the address bar of Explorer on the client computer, enter the address in the following format: \\192.168.1.XX\FolderName.
If the system prompts you for credentials, enter the login and password of the user you use on the remote computer (or a dedicated network user). For easy access, we recommend mapping the network folder to a drive letter.
To do this, right-click "This PC" in File Explorer and select "Map network drive." Select an available drive letter (e.g., Z:) and enter the path to the resource in the "Folder" field. Be sure to check "Restore at logon" so that the drive is automatically mounted after a reboot.
- 💾 Use drive letters at the end of the alphabet (X, Y, Z) to avoid conflicts with local partitions.
- 🔗 The path to the resource must begin with two backslashes:
\\. - 🔄 If the password on the remote computer changes, access to the disk will be lost until the credentials are updated.
If you encounter connection errors, try adding credentials manually through the Control Panel. Open Credential Manager, select Windows Credentials, and add a new resource by entering the computer's address, username, and password.
Diagnosis and solution of typical errors
Even with proper configuration, access errors such as "0x80070035" (Network path not found) or "0x80070005" (Access denied) may occur. These error codes often indicate permission issues or ports blocked by an antivirus program.
The "Network path not found" error most often indicates that the computers are on different subnets or the computer name is not resolved correctly. In this case, using the IP address instead of the computer name usually resolves the issue. It's also worth checking the "Function Discovery Provider Host" service—it should be running.
If you see an access error, check the "Security" tab in the folder's properties. It often happens that network permissions are open, but NTFS permissions block writing. Make sure the user has "Write" and "Modify" permissions at the file system level.
Third-party antivirus programs (Kaspersky, ESET, Dr.Web) often have their own firewall modules that can block local connections even if Windows Firewall is configured correctly. Try temporarily disabling your antivirus's firewall for diagnostic purposes.
What should I do if my computer is not visible in the network environment, but it can be connected via IP?
This is normal behavior for Windows 10, as the discovery service (NetBIOS) is often unstable. Use shortcuts with a direct path (\\IP address) or configure a static IP and drive mapping for consistent access. Network Neighborhood is only a visual list and does not affect the actual availability of resources.
Is it possible to share a folder with users without a password?
Yes, to do this, select "Turn off password-protected sharing" in the "All Networks" section of the advanced sharing options. However, this reduces security: anyone who connects to your Wi-Fi will have access to the folder.
Why is the network copy speed so slow?
Speed may be limited by the Wi-Fi standard (especially at 2.4 GHz), channel congestion, or network adapter power-saving settings. Check that the "Turn off device to save power" permission is disabled in the adapter properties, and ensure you're using the 5 GHz band.
How do I disable folder sharing?
Return to the folder properties, click the "Sharing" tab, click "Advanced" and uncheck "Share this folder." It's also recommended to check the "Security" tab and remove the "Everyone" group if it's still there.