Why Canon Scan to SMB Folder Fails on Windows 11 Default Settings

Canon multifunction printers can scan documents directly to a shared folder on your network using the SMB protocol. On Windows 11, the default security settings for SMB have changed compared to earlier versions of Windows. This change causes the printer to fail when it tries to write a scanned file to the folder. This article explains why the failure occurs and how to configure your Windows 11 system to allow Canon Scan to SMB to work reliably.

Why Windows 11 Default Settings Break Canon Scan to SMB

Canon Scan to SMB uses the Server Message Block protocol to transfer scanned images from the printer to a network folder. The printer acts as an SMB client that connects to the Windows 11 shared folder. Windows 11 introduced several security hardening changes to SMB that break compatibility with older SMB clients, including Canon printers.

Windows 11 Disables SMB1 by Default

Many Canon printers, especially models released before 2020, require SMB version 1 to communicate with a Windows shared folder. Windows 11 removes the SMB1 feature entirely during a clean installation. Even on an upgrade from Windows 10, the SMB1 feature is disabled. Without SMB1, the printer cannot negotiate a connection and the scan job fails with an error message on the printer panel such as “Connection failed” or “Server not found.”

Windows 11 Requires SMB Signing and Encryption

Windows 11 Home and Pro editions require SMB signing for all outbound SMB connections by default. Canon printers do not support SMB signing because their embedded SMB client was designed before this security feature became mandatory. When the printer attempts to write a file to the shared folder, Windows 11 rejects the unsigned SMB packets and the scan operation fails. Similarly, Windows 11 requires SMB encryption for connections to shares on systems that support it, but Canon printers do not support encryption. The printer cannot complete the file transfer.

Folder Permission Mismatch

Even when SMB1 is enabled and signing is disabled, the printer must have the correct permissions on the shared folder. The printer authenticates using a local user account on the Windows 11 machine. If that account lacks Write or Modify permissions on the folder, the printer cannot save the scanned file. Windows 11 default folder permissions grant Read access to the Users group but not Write access to individual user accounts.

Steps to Enable Canon Scan to SMB on Windows 11

Follow these steps in order to configure Windows 11 for Canon Scan to SMB. You need administrator access on the Windows 11 computer.

1. Enable SMB1 on Windows 11
   Open Control Panel. Click Programs. Click Turn Windows features on or off. In the list, expand SMB 1.0/CIFS File Sharing Support. Check the box for SMB 1.0/CIFS Client. Click OK. Restart the computer when prompted. This adds the SMB1 client that Canon printers require.
2. Disable SMB signing on the shared folder
   Open PowerShell as Administrator. Run the command: Set-SmbClientConfiguration -RequireSecuritySignature $false. Press Enter. Run: Set-SmbClientConfiguration -EnableSecuritySignature $false. Press Enter. Restart the computer. This tells Windows 11 to accept unsigned SMB packets from the Canon printer.
3. Create a local user account for the printer
   Open Settings > Accounts > Other users. Click Add account. Select Add a user without a Microsoft account. Enter a username such as “scanner” and a strong password. Leave all other options at their defaults. Click Next. This account will be used by the printer to access the shared folder.
4. Create the shared folder and set permissions
   Create a folder on your desktop or Documents folder named Scans. Right-click the folder and select Properties. Click the Sharing tab. Click Share. In the dropdown, select the scanner account you created. Click Add. Change the permission level from Read to Read/Write. Click Share. Click Done. This gives the printer account the required write access.
5. Configure the Canon printer for Scan to SMB
   On the printer control panel, press the Scan button. Select the Scan to SMB or File option. Enter the IP address or hostname of the Windows 11 computer. Enter the folder path using the format \computer-name\Scans. Enter the scanner account username and password. Set the file format and resolution as desired. Save the settings. Test the scan by pressing the Start button.

Common Issues When Setting Up Canon Scan to SMB on Windows 11

“Connection Failed” or “Server Not Found” on the Printer

This error usually means the printer cannot reach the Windows 11 computer over the network. Check that both devices are on the same subnet and can ping each other. Verify that the Windows 11 firewall allows inbound SMB traffic. Open Windows Security > Firewall & network protection. Click Allow an app through firewall. Make sure File and Printer Sharing is checked for Private networks. If the printer still fails, reboot the printer and the Windows 11 computer.

“Cannot Write to Folder” or “Permission Denied” Error

This error indicates the printer credentials are correct but the folder permissions are not set properly. Verify that the scanner account has Write and Modify permissions on the folder. Right-click the shared folder, select Properties, click the Security tab, and confirm the scanner account appears in the list with Full Control or Modify checked. If the account is missing, click Edit, Add the account, and grant Modify permissions.

Scan Job Starts but the File Is Empty or Corrupted

This problem occurs when SMB signing is still enabled on the Windows 11 client. Re-run the PowerShell commands to disable SMB signing and restart the computer. If the issue persists, check the Canon printer firmware version. Canon released firmware updates for many models that improve SMB compatibility. Visit the Canon support website, enter your printer model, and install the latest firmware.

Printer Shows “Authentication Failed” Even with Correct Credentials

Windows 11 may reject the printer’s authentication if the local account has a blank password. Ensure the scanner account has a non-blank password. If the printer is configured to use a domain account instead of a local account, switch to a local account on the Windows 11 machine. Domain accounts require additional configuration for SMB access that is beyond the scope of this article.

SMB1 vs SMB2 vs SMB3: Protocol Differences for Canon Printers

Item	SMB1	SMB2/SMB3
Description	Original SMB protocol from 1980s, used by older Canon printers	Modern SMB protocol introduced with Windows Vista, secure by default
Default in Windows 11	Disabled	Enabled
Security features	No signing, no encryption, weak authentication	Mandatory signing, encryption support, secure authentication
Canon printer support	Required for printers released before 2020	Supported on newer Canon models with firmware update
Performance	Slower, less efficient	Faster, better for large scans
Risk of enabling	Increases vulnerability to ransomware and malware	No additional risk

After enabling SMB1, monitor the Windows 11 computer for unusual network activity. If you do not need SMB1 after the Canon scan is working, disable it again. To disable SMB1, open Control Panel > Programs > Turn Windows features on or off and uncheck SMB 1.0/CIFS Client. Restart the computer. The scan will stop working, but your system will be more secure.

You can now configure Canon Scan to SMB on Windows 11 by enabling SMB1, disabling SMB signing, and setting correct folder permissions. Test the scan with a single-page document before scanning multi-page jobs. If you upgrade the Canon printer firmware to the latest version, you may be able to use SMB2 or SMB3 instead of SMB1, which eliminates the security risk of enabling the older protocol.