Last Updated on 16.08.2026 by DriverNew
If an OKI MB472, MB492 or MB562 can copy and print but cannot save scans to a Windows network folder, reinstalling the scanner driver usually will not help. When using Scan to Shared Folder, the MFP connects directly to the computer’s shared folder using the CIFS/SMB protocol. In this connection, the computer acts as the SMB server and the MFP as the SMB client.
The error may be caused by an incorrect path, a changed computer IP address, the Windows password, folder permissions, the firewall, or an incompatible SMB version. The last point is especially important for this series: the specifications of the original platform list SMB version 1.0, while modern installations of Windows 10 and Windows 11 do not include the SMB1 server by default.
Do not enable SMB1 Client based on advice from a random guide
To transfer a scan, the MFP connects to the computer, so Windows must accept an incoming connection. The SMB 1.0/CIFS Client component is needed for the opposite situation — when the computer itself connects to an old network storage device. Enabling it does not fix a Scan to Shared Folder error.
Models covered by this guide
This configuration applies to models built on the same platform:
- OKI MB472dn and MB472dnw;
- OKI MB492dn;
- OKI MB562dnw;
- OKI ES4172LP MFP, ES4192 MFP, ES5162 MFP and ES5162LP MFP.
The names of some items may differ slightly depending on the firmware version and control panel language, but the Protocol, Target URL, Port No., User Name and Password fields perform the same functions.
How to determine whether saving to the folder is the actual problem
- Place a sheet on the platen glass and make a normal copy from the MFP control panel.
- If you use the automatic document feeder, make a second copy through the ADF.
- If both copies are produced, the scanning mechanism is working.
- Print any document from the computer. Successful printing confirms communication with the device, but it does not confirm that the MFP can access the shared folder.
- Open the MFP’s IP address in a browser. If its web page does not load, restore the network connection first.
Scanner Driver, TWAIN, WIA and ActKey are not required for Scan to Shared Folder. These components are used when scanning is started from the computer or when the file is transferred to ActKey. For a network folder, you only need a working network, a correctly configured CIFS profile and an accessible SMB server.
Set a fixed address for the computer before configuration
It is easier to use the computer’s IP address in the profile rather than its name. This eliminates DNS and NetBIOS resolution errors. However, the address must not change after the router is restarted.
- Press Win + R, enter cmd and press Enter.
- Enter the command:
ipconfig
- Find the active Ethernet or Wi-Fi adapter and write down its IPv4 Address, for example 192.168.1.100.
- Open the router settings and create a DHCP reservation for this computer. If that is not possible, assign a correct static address while taking the DHCP range into account.
- Do not use the address of a VPN, Bluetooth or virtual-machine adapter.
The computer and MFP must be on the same local network. A guest Wi-Fi network, AP Isolation, corporate client isolation or an active VPN may block access even when both devices can access the internet.
Create a separate account for scanning
It is recommended to create a standard local account, for example oki-scan, and allow it to write only to one folder. Do not use an administrator account and do not leave the folder accessible without a password.
Windows 10
- Open Settings > Accounts > Family & other users.
- Click Add someone else to this PC.
- Select I don’t have this person’s sign-in information.
- Select Add a user without a Microsoft account.
- Enter the name oki-scan and a separate password.
- Leave the account type as Standard User.
Windows 11
- Open Settings > Accounts > Other users.
- Next to the option to add another user, click Add account.
- Select I don’t have this person’s sign-in information.
- Select Add a user without a Microsoft account.
- Enter the name oki-scan and a separate password.
- Do not add the user to the Administrators group.
A Windows PIN is not a password
In the Password field of the OKI profile, enter the account password, not the Windows Hello PIN. An account without a password also often cannot be used for network sign-in.
Create the folder and assign two levels of permissions
- On drive C, create the folder C:\Scans.
- Right-click the folder and open Properties.
- On the Sharing tab, click Advanced Sharing.
- Enable Share this folder.
- In the share name field, enter Scans.
- Click Permissions, add the user oki-scan and allow Read and Change.
- Remove the Everyone group if it is not required by other users.
- Return to the folder properties and open the Security tab.
- Click Edit > Add and add the user oki-scan.
- Allow Modify, Read & execute, List folder contents, Read and Write.
- Apply the changes.
The permissions on the Sharing and Security tabs are checked together. If writing is allowed at one level but only reading is allowed at the other, the MFP may find the folder but will not be able to save a file.
For the initial test, use Latin letters and numbers without spaces in the user name, computer name and share name. After the test succeeds, you can test more complex names separately.
Windows 10: enable sharing on a private network
- Open Settings > Network & Internet.
- Open the properties of the active Ethernet or Wi-Fi connection.
- Select the Private network profile.
- Open Control Panel > Network and Internet > Network and Sharing Center.
- Click Change advanced sharing settings.
- Under Private, turn on network discovery and file and printer sharing.
- Under All Networks, leave password protected sharing enabled.
Windows 11: enable sharing on a private network
- Open Settings > Network & internet.
- Open the properties of the active connection and set Network profile type to Private network.
- Go to Advanced network settings > Advanced sharing settings.
- Expand Private networks.
- Turn on Network discovery and File and printer sharing.
- Expand All networks and leave Password protected sharing enabled.
Disabling password protection is not the correct solution for permanent MFP operation. The OKI profile supports a user name and password; use them instead of guest access.
Check the Windows service and firewall
- Press Win + R, enter services.msc and press Enter.
- Find the Server service.
- If it is stopped, open its properties, set Startup type to Automatic and click Start.
- Open Windows Security > Firewall & network protection > Allow an app through firewall.
- Allow File and Printer Sharing only for the private network.
- If additional firewall rules are used, allow the inbound rule File and Printer Sharing (SMB-In) for the private profile and local subnet.
Do not expose TCP port 445 to the internet
SMB should be accessible only within a trusted local network. Do not create port forwarding for port 445 on the router and do not allow the SMB rule for a public network profile.
Test the folder before configuring the MFP
- On another computer on the same network, open File Explorer.
- Enter the following path in the address bar, replacing the IP address with the address of the computer that hosts the folder:
\\192.168.1.100\Scans
- When Windows asks for credentials, enter COMPUTER-NAME\oki-scan and the password of the account you created.
- Create a small text file in the folder.
- Delete this file.
If the folder opens but you cannot create or delete a file, correct the permissions on the Sharing and Security tabs. If another computer cannot open the path at all, it is too early to configure the MFP profile: check the IP address, Server service, firewall and port 445.
You can check the port from PowerShell on another computer:
Test-NetConnection 192.168.1.100 -Port 445
The value TcpTestSucceeded : True confirms that the port is accessible. It does not confirm SMB version compatibility, the user name, or write permissions.
Create a CIFS profile through the OKI web page
- On the MFP, press SETTING.
- Open Reports > Configuration and print the configuration.
- Find the MFP’s IPv4 address, for example 192.168.1.50.
- On the computer, enter this address in a browser: http://192.168.1.50.
- Open the administrator login.
- In the user name field, enter root, and in the password field enter the current device administrator password.
- After signing in, open List > Profile.
- Select an unused profile number and click New.
Fill in the profile as follows:
| Field | Example | Important |
|---|---|---|
| Profile Name | Windows Scan | This name will be visible on the MFP control panel. |
| Protocol | CIFS | Do not select FTP or HTTP for a Windows shared folder. |
| Target URL | \\192.168.1.100\Scans | Enter a UNC path, not C:\Scans, not smb://…, and not a web-page address. |
| Port No. | 445 | The standard CIFS port for this profile. |
| User Name | oki-scan | If sign-in fails, try COMPUTER-NAME\oki-scan. The field allows up to 32 characters. |
| Password | oki-scan password | Not the Windows PIN. The field allows up to 32 characters. |
| CIFS Character Set | UTF-16 | Leave the default value. |
| Encode Communication | None | Encryption is not available for CIFS in this field. |
| File Name | Scan#d | #d adds the date, while #n adds a sequential number and prevents duplicate-name conflicts. |
- Click Submit or the save button.
- Wait for confirmation. Moving to another page before submitting the form may discard the entered values.
If there is no working DNS or NetBIOS name resolution on the network, use the IP address in Target URL. The path \\PC1\Scans depends on name resolution, while \\192.168.1.100\Scans does not.
Start Scan to Shared Folder from the control panel
- Place the document in the ADF or on the platen glass.
- Press SCAN.
- Select Shared Folder and press OK.
- Open Select Profile.
- Select the Windows Scan profile you created.
- For the first test, select A4, PDF, 300 dpi and simplex scanning.
- Press the monochrome or color start button.
- Check whether the file appears in C:\Scans.
If the profile is not displayed, it was not saved, was created under another number, or the wrong control-panel section is open. If the profile is displayed but the job ends with an error, compare when the error occurs with the table below.
What the MFP behavior means during testing
| Symptom | Most likely cause | What to do |
|---|---|---|
| CIFS connection error appears almost immediately | Incorrect IP address, path, port, firewall setting, or incompatible SMB version | Check Target URL, TCP port 445 availability, and the SMB1 section. |
| Login error or Authentication Error | A PIN was entered, the password is incorrect, or the user-name format is unsuitable | Enter the local account password; check oki-scan and COMPUTER-NAME\oki-scan. |
| Access denied or the file is not created | Insufficient share or NTFS permissions | Assign Change/Read again on the Sharing tab and Modify/Write on the Security tab. |
| The folder works by IP address but not by computer name | DNS or NetBIOS cannot resolve the computer name | Keep the IP address in the profile and reserve it in DHCP. |
| Scanning stopped working after the router was restarted | The computer received a different IP address | Correct Target URL and create a DHCP reservation. |
| Scanning works only while the computer is active | Sleep, hibernation or network-adapter power saving | Do not put the storage computer to sleep while it is in use and check the network adapter power settings. |
| The first file is saved, but the next one is not | An existing file has the same name | Add #n or #d to the File Name field. |
| After a fresh installation of Windows 10 or Windows 11, the path and password are correct but there is no connection | The SMB1 server is missing | Update the MFP firmware first, then choose a secure compatibility option. |
| The error appeared only after Windows 11 24H2 | Mandatory SMB signing and the existing SMB1 incompatibility may be involved | First determine the SMB version supported by the MFP; then check the server-side signing setting, not the client-side setting. |
Update the firmware before changing Windows security settings
Before enabling an outdated protocol, install the current firmware for your model. Update pages are available for OKI MB472dnw, OKI MB492dn and OKI MB562dnw. Select your exact model and use the latest Firmware Update Tool.
- Write down the current network settings and the MFP administrator password.
- Connect the computer and MFP to a stable network.
- Close all print and scan jobs.
- Run Firmware Update Tool as administrator.
- Select only your device.
- Do not turn off the MFP, computer or network equipment until the update is complete.
- After the restart, check the CIFS profile again.
The mere availability of newer firmware does not prove that SMB2 or SMB3 has been added: this must be stated in the release notes for the specific version or confirmed by network testing. Updating comes first because using the latest available implementation is safer than immediately weakening Windows security.
Why modern versions of Windows do not accept an SMB1 connection
The network specifications for this platform list SMB 1.0. The current Windows SMB1 documentation states that the SMB1 server is not installed by default on clean installations of modern Windows 10 releases, while Windows 11 does not include either the SMB1 client or server by default.
This does not mean that SMB1 should automatically be enabled on the main work computer. The protocol is outdated and does not provide a modern level of security. The recommended order of options is:
- Update the firmware and repeat the test.
- If the device remains compatible only with SMB1, use Scan to Email, Scan to USB or scanning to the computer through ActKey/TWAIN.
- If a network folder is mandatory, use a separate file server or NAS where SMB1 access can be restricted to a separate trusted subnet, one account and one folder.
- Enable SMB1 Server on a Windows computer only as a temporary or isolated option, while understanding the risk.
How to enable only SMB1 Server in Windows — last resort
This reduces the security of the computer
Do not perform these steps on a public, guest or untrusted network. Do not use them on a laptop that regularly connects to networks you do not control. For permanent use, it is safer to dedicate a separate storage device or choose another scanning method.
The path to the component is the same in Windows 10 and Windows 11:
- Press Win + R.
- Enter optionalfeatures.exe and press Enter.
- Find SMB 1.0/CIFS File Sharing Support.
- Expand this item.
- Enable only SMB 1.0/CIFS Server.
- Do not enable SMB 1.0/CIFS Client unless the computer itself needs to connect to old SMB storage.
- Confirm installation of the component and restart the computer.
- Make sure the network remains private and that the SMB rule is allowed only for the local subnet.
- Repeat scanning from the OKI control panel.
If the feature is no longer needed, open optionalfeatures.exe again, clear the SMB 1.0/CIFS Server check box and restart the computer. Do not leave the outdated server enabled “just in case”.
Windows 11 24H2: do not confuse the SMB version with SMB signing
In Windows 11 24H2 Pro, Enterprise and Education editions, incoming and outgoing SMB connections require signing by default. This is a separate integrity check, not a protocol version. Disabling the signing requirement does not add SMB1 support, and enabling SMB1 Server does not guarantee that an old client can sign the connection.
This section is relevant only after updating the firmware and checking the path, port, password and permissions. On the Windows computer that receives scans:
- Press Win + R, enter winver and check the Windows version.
- Open PowerShell as administrator.
- Check the signing requirement for the SMB server:
Get-SmbServerConfiguration | Format-List RequireSecuritySignature
If True is displayed, Windows requires signing from the device that writes the file. Do not change Set-SmbClientConfiguration: this command applies to outgoing connections from the computer itself and does not fix an incoming scan.
It is recommended to leave signing enabled and use a compatible server or another scanning method. Only for a diagnostic test on an isolated trusted network can the requirement on the receiving computer be temporarily disabled:
Set-SmbServerConfiguration -RequireSecuritySignature $false
Confirm the change, perform one test and do not disable the firewall. If scanning starts working, the cause is related to SMB signing. This does not make the weakened configuration suitable for permanent use. Restore the signing requirement with:
Set-SmbServerConfiguration -RequireSecuritySignature $true
The signing requirements and Windows 11 24H2 edition differences are described in the SMB signing settings. If using the older MFP requires SMB1, disabling signing and weak authentication at the same time, do not use the main computer as permanent scan storage.
If the password and SMB are configured but sign-in is still rejected
- Enter the password in the profile manually again. After the Windows password is changed, the old value remains stored in the MFP.
- First try the name oki-scan, then COMPUTER-NAME\oki-scan.
- For a domain account, try the format user@domain. If it does not work, use the format specified by the domain administrator and check Workgroup/NBT in the MFP network settings.
- Make sure the user name and password do not exceed 32 characters.
- Do not weaken LAN Manager, NTLM or guest sign-in settings without precisely confirming the cause. If Windows rejects the MFP’s outdated authentication method, it is safer to use a separate compatible server or another scan delivery method.
When it is better to stop using a Windows shared folder
Scan to Shared Folder is convenient when the current MFP firmware is compatible with a secure file-server configuration. If connecting requires enabling SMB1 on the main computer, disabling mandatory signing or allowing weak authentication, choose one of the following options:
- Scan to Email — to send the document to a recipient or a dedicated mailbox;
- Scan to USB Memory — when a network connection is not required;
- ActKey, TWAIN or WIA — when scanning can be started from the computer;
- a separate NAS or file server — when a centralized folder is required and outdated access can be isolated from the rest of the network.
This choice eliminates not only the current CIFS error but also dependence on security changes in future Windows updates.



Leave a Reply