If you run: smbclient //localhost/netlogon -U% then you should get NT_STATUS_ACCESS_DENIED With current s4 we allow the connection and deny file accesses. That could break some clients as they will not retry with their credentials after a anonymous connection