SMB requires full file system access for shared files on external drive

I am able to connect from my non Apple mobile device to access the shared files. If a shared folder is on an external drive, SMB is not allowed to access these files.


I can only access these files, if SMB has full access to the complete file system.


Why?

How can I change it, so that I do not have to active complete access?

Posted on Aug 12, 2026 3:35 AM

Reply
Question marked as Top-ranking reply

Posted on Aug 12, 2026 3:42 AM

Try this


On modern macOS versions, Apple enforces strict Transparency, Consent, and Control (TCC) security policies. The built-in file sharing daemon (smbd) requires system-wide disk permission to parse and traverse external volumes safely. Without it, macOS blocks external network access to protect hardware that is not part of the internal boot volume.

To share a specific folder on an external drive without giving total access to your entire file system, configure the volume and user permissions properly: 

Fix External Drive Permissions

  • Select your external drive in Finder and press Cmd + I to open the information
  • Click the lock icon at the bottom right and enter your administrator password.
  • Check the box for "Ignore ownership on this volume" (if available and not used for Time Machine). This allows network accounts to read/write files without matching local POSIX user IDs.
  • Alternatively, adjust the Sharing & Permissions list at the bottom of the Info window, adding Everyone or specific groups with Read & Write privileges. 


4 replies
Question marked as Top-ranking reply

Aug 12, 2026 3:42 AM in response to atsuem

Try this


On modern macOS versions, Apple enforces strict Transparency, Consent, and Control (TCC) security policies. The built-in file sharing daemon (smbd) requires system-wide disk permission to parse and traverse external volumes safely. Without it, macOS blocks external network access to protect hardware that is not part of the internal boot volume.

To share a specific folder on an external drive without giving total access to your entire file system, configure the volume and user permissions properly: 

Fix External Drive Permissions

  • Select your external drive in Finder and press Cmd + I to open the information
  • Click the lock icon at the bottom right and enter your administrator password.
  • Check the box for "Ignore ownership on this volume" (if available and not used for Time Machine). This allows network accounts to read/write files without matching local POSIX user IDs.
  • Alternatively, adjust the Sharing & Permissions list at the bottom of the Info window, adding Everyone or specific groups with Read & Write privileges. 


Aug 12, 2026 4:11 AM in response to atsuem

atsuem wrote:
I am able to connect from my non Apple mobile device to access the shared files. If a shared folder is on an external drive, SMB is not allowed to access these files.
I can only access these files, if SMB has full access to the complete file system.
Why?

There is a separate security protection for external volumes. But since File Sharing can't prompt the remote user for access to an external volume, the only way to allow access is with Full Disk Access.


How can I change it, so that I do not have to active complete access?

You can specify which folders are shareable. Only share the ones you want.

Aug 12, 2026 9:42 AM in response to WheelieNick

Thx for the new information.

Unfortunately the ownership of the volume has always been ignored. The my admin account I can access the files on my internal volume, but I cannot access my external volume.


The shared folder has the proper access permissions. (read/write for my admin account)



The following console log have been found:

 report for System Policy: smbd(3691) deny(1) file-read-data /Volumes/myExternal/..../folder


SMB requires full file system access for shared files on external drive

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.