Cannot access Roon Nucleus storage? Learn how to enable SMB Guest Access on Windows 10/11 using Group Policy or PowerShell to fix network connection errors.

Enabling SMB Guest Access for Roon Nucleus / ROCK on Windows

When attempting to access the internal storage of a Roon Nucleus or Roon Optimized Core Kit (ROCK) from a Windows PC, you may encounter a connection error or a persistent password prompt (even when entering the correct credentials Guest / Guest).

Identify the Error

  • 0x80070035 or 0x800704f8: "The network path was not found" (Guest access is blocked).

  • 0xc000a000 / STATUS_INVALID_SIGNATURE: (SMB Signing is required but the NAS doesn't support it).


Why is this happening?

This issue arises from a conflict between the convenience settings of the Nucleus and the tightened security standards of modern Windows operating systems.

  1. Nucleus/ROCK Protocol: To make the device as "plug-and-play" as possible, the Roon OS shares its internal storage using SMB Guest Access. This allows users to connect without needing to create specific users or manage complex permissions.

  2. Windows Security Policies: In recent updates to Windows 10 and Windows 11, Microsoft has disabled "Insecure Guest Logons" by default. Windows treats unauthenticated guest access as a potential security vulnerability.

Consequently, Windows blocks the connection to the Nucleus because the Nucleus does not ask for a secure, authenticated login. To resolve this, you must explicitly allow Windows to connect to "Guest" network shares.

How to Fix It

Windows 10 (1709 – 22H2) and Windows 11 (up to 23H2)

  1. Press Win + R, type gpedit.msc, and press Enter.

  2. Navigate to: Computer Configuration > Administrative Templates > Network > SMB Client.

  3. Locate Allow insecure guest logons. Double-click → set to Enabled → OK.

  4. Disable SMB Signing:

    • Navigate to: Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.

    • Locate Microsoft network client: Digitally sign communications (always).

    • Double-click → set to Disabled → OK.

Windows 11 (24H2 and later)

  1. Press Win + R, type gpedit.msc, and press Enter.

  2. Navigate to: Computer Configuration > Administrative Templates > Network > Lanman Workstation.

  3. Locate Enable insecure guest logons. Double-click → set to Enabled → OK.

  4. Disable SMB Signing:

    • Navigate to: Computer Configuration > Windows Settings > Security Settings > Local Policies > Security Options.

    • Locate Microsoft network client: Digitally sign communications (always).

    • Double-click → set to Disabled → OK.

Windows Home (Using PowerShell)

If you don't have gpedit.msc, use PowerShell as Administrator:

  1. Enable Guest Logons:

    reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\LanmanWorkstation" /v AllowInsecureGuestAuth /t REG_DWORD /d 1 /f

  2. Disable SMB Signing:

    reg add "HKLM\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters" /v RequireSecuritySignature /t REG_DWORD /d 0 /f

  3. Restart your PC.

How to Connect to Your Storage

Once you have adjusted the Windows settings above, you can connect to your specific device.

  1. Open File Explorer on Windows (or Finder on macOS).

  2. If prompted for a username and password, enter Guest for both.

  3. Type the address corresponding to your specific Roon model into the address bar:

For Windows Users:

  • Nucleus One: \\NUCLEUSONE\Data\Storage\InternalStorage

  • Nucleus Titan: \\NUCLEUSTITAN\Data\Storage\InternalStorage

  • Nucleus (Standard): \\NUCLEUS\Data\Storage\InternalStorage

  • Nucleus+: \\NUCLEUSPLUS\Data\Storage\InternalStorage

  • ROCK: \\ROCK\Data\Storage\InternalStorage

For macOS Users:

  • Nucleus One: smb://NUCLEUSONE/Data/Storage/InternalStorage

  • Nucleus Titan: smb://NUCLEUSTITAN/Data/Storage/InternalStorage

  • Nucleus (Standard): smb://NUCLEUS/Data/Storage/InternalStorage

  • Nucleus+: smb://NUCLEUSPLUS/Data/Storage/InternalStorage

  • ROCK: smb://ROCK/Data/Storage/InternalStorage

You can now drag and drop your music files and folders into this window to copy them to the Nucleus.

    • Related Articles

    • Nucleus Internal Storage

      Your Nucleus supports an internal 2.5" HDD or SSD to create a self-contained music server. For a completely silent system, we recommend using an SSD. If you chose to use an SSD here, the system will stay fully silent. The entire internal storage ...

    • Networking Best Practices

      A properly functioning home network ensures that Roon performs as expected, with remotes connecting and loading content quickly as you browse, and audio devices that are free from dropouts and other playback issues. More complex network setups will ...

    • RoonOS Recovery (Nucleus/ROCK)

      Users are expected to try to recover their data and/or reinstall using the web UI if their device is unusable. However, if you can't even boot up Nucleus or ROCK and get to the web UI, then doing a recovery via the USB flash drive RoonOS installer is ...

    • Nucleus Web Administration Interface

      Connecting to the Web Administration Interface You can use a web browser to perform operations like configuring settings, updating firmware, formatting internal storage, and resetting to factory settings. To use Roon to help you load up the Nucleus ...

    • Roon Optimized Core Kit

      Let's first explain what Roon OS is, and then we can talk about Roon Optimized Core Kit. Roon OS is a custom Linux-based operating system, tailored for running Roon Server and providing a best-in-class, appliance-type user experience. Roon OS boots ...
    Visit the Roon Community!
    Need help? Thousands of Roon subscribers and audio enthusiasts are chatting over on our community site right now, join them! You don't even need a Roon subscription to sign up.