This week the reports of Samsung laptop users with Windows 11 have increased and, after installing the security updates of February 2026, they found themselves with a serious problem: the system stops allowing access to volume C:\ and many applications stop starting. Microsoft has recognized the incident and is investigating with Samsung to determine whether the cause is in Windows updates or in Samsung's pre-installed software.
Those affected describe that when they try to open folders or run programs they receive the message "C:\ is not accessible - Access denied," and that applications as usual as Outlook, Office suites, browsers or system utilities cannot be started. In some cases permissions problems prevent even raising privileges, uninstalling updates or reviewing system records, which greatly complicates user recovery.

According to the reports collected so far, the failure has concentrated mainly on certain markets - with cases mainly in Brazil, Portugal, South Korea and India - and seems to affect mainly models in the Samsung consumption range, including the Galaxy Book 4. Microsoft has indicated that, for now, the Windows 11 teams in the 25H2 and 24H2 branches are the ones reporting these symptoms.
In its most recent investigations, the company has pointed out that the Samsung Share application could be involved in the incident, although it has not yet confirmed a final causal relationship or published an official temporary solution. To follow official communications and warnings it is appropriate to monitor the status and health page of the Windows 11 versions of Microsoft, where they publish warnings and mitigations when confirming problems with updates: Windows Release Health (Microsoft).
In parallel to the work of Microsoft and Samsung, an unofficial solution proposed by a user identified as a Samsung technician in Brazil has been circulated in forums and networks. This "healing" would restore access by changing the owner of all volume C:\ and all its subfolders to the "Everyone" group, including directories and files that are normally protected under owners such as TrustedInstaller or SYSTEM. Doing this disrupts Windows internal protections and leaves the system much more vulnerable; therefore it is not a recommended practice except in extreme situations and by experienced personnel.
If you are affected by this problem, three practical recommendations before taking drastic action: stay calm, avoid applying massive C:\ property changes and prioritize backup of your data. If the computer still starts in some recovery mode or if you can access a recovery environment from an external environment, copy your personal files to an external disk or to the cloud. Avoid applying mass permissions modification is important because it can leave the system in an unsupported state and make it difficult for future updates or restorations.
While Microsoft and Samsung work on a correction, it is appropriate to regularly check Windows Update and official support pages to install any patch they publish. You can check the Windows 11 update history and the security patch related entries on the Microsoft support web: Windows 11 (Microsoft Support) update history. If your computer is a Samsung, the manufacturer's support can also offer specific guides or instructions for models with own software such as Samsung Share or pre-installed utilities: Samsung Support.

For those who want to understand why changing system owners or permissions is risky, Microsoft documents Windows-integrated security protections and account role like TrustedInstaller or SYSTEM in protecting critical files; altering them can facilitate system malfunction or malware action: Access control and permissions in Windows (Microsoft).
In the field of journalistic monitoring, specialized media often update quickly when such problems arise and official mitigation appears. You can follow coverage and analysis in security and technology publications for user reports, safe practice guides and when a patch is released: BleepingComputer and other technological means often provide such monitoring.
In short, if you use a Samsung laptop with Windows 11 and have noticed C:\ access errors after the February 2026 updates, the most sensible thing now is to back up your data, not apply massive permissions or root disk property changes, and wait for official Microsoft and Samsung communications and patches. Applying the "solution" of changing everything to Everyone can solve access immediately, but at the cost of severely weakening the security and stability of the system. Keep an eye on Microsoft and Samsung support pages and, if you need to, contact your technical support before running changes that can complicate a later recovery.
Related
More news on the same subject.

18-year-old Ukrainian youth leads a network of infostealers that violated 28,000 accounts and left $250,000 in losses
The Ukrainian authorities, in coordination with US agents. They have focused on an operation of infostealer which, according to the Ukrainian Cyber Police, was allegedly adminis...

RAMPART and Clarity redefine the safety of IA agents with reproducible testing and governance from the start
Microsoft has presented two open source tools, RAMPART and Clarity, aimed at changing the way the safety of IA agents is tested: one that automates and standardizes technical te...

The digital signature is in check: Microsoft dismands a service that turned malware into apparently legitimate software
Microsoft announced the disarticulation of a "malware-signing-as-a-service" operation that exploited its device signature system to convert malicious code into seemingly legitim...

A single GitHub workflow token opened the door to the software supply chain
A single GitHub workflow token failed in the rotation and opened the door. This is the central conclusion of the incident in Grafana Labs following the recent wave of malicious ...

WebWorm 2025: the malware that is hidden in Discord and Microsoft Graphh to evade detection
The latest observations by cyber security researchers point to a change in worrying tactics of an actor linked to China known as WebWorm: in 2025 it has incorporated back doors ...

Identity is no longer enough: continuous verification of the device for real-time security
Identity remains the backbone of many security architectures, but today that column is cracking under new pressures: advanced phishing, real-time proxyan authentication kits and...

The dark matter of identity is changing the rules of corporate security
The Identity Gap: Snapshot 2026 report published by Orchid Security puts numbers to a dangerous trend: the "dark matter" of identity - accounts and credentials that are neither ...