Skip to content
AnyStorage
Free Download

WebDAV on Windows

WebDAV Not Working on Windows 11: What Changed

Microsoft deprecated the WebDAV service in November 2023 and it no longer starts by default. How to turn it back on, the registry values that still bite, and the limits.

Why WebDAV mappings that worked on older Windows fail on Windows 11, with Microsoft's own deprecation wording, the commands that re-enable the service, and every documented limit.

webdav windows 11 not working, webclient service windows 11, webdav deprecated windows

What actually changed

Nothing about your server. Microsoft's list of deprecated Windows client features carries this entry, announced in November 2023:

text

Webclient (WebDAV) Service
The Webclient (WebDAV) service is deprecated.
The Webclient service isn't started by default in Windows.

Those two sentences explain most of the "WebDAV doesn't work on Windows 11" reports on the internet. The feature is still present and still works. It is no longer being developed, and the service that implements it sits stopped on a fresh install, so the first mapping attempt fails and the message you get — "The network name cannot be found", 0x80070043, or "The folder you entered does not appear to be valid" — says nothing about a stopped service.

The five things that break WebDAV on Windows 11, in order
FailureCauseFix
Any mapping attempt fails immediatelyWebClient service not startedStart it and set it to Automatic
http:// endpoint, no password promptBasic authentication limited to SSL sitesBasicAuthLevel = 2
Copy dies around 50 MB with 0x800700DFFileSizeLimitInBytes defaultRaise the value, reboot
Fixed something, retried at once, same errorNon-WebDAV server cacheWait 60 seconds
Mapping is gone after a rebootBasic credentials are not persistedRe-map from a logon script

1. Start the service, then make it automatic

powershell

Get-Service WebClient | Format-List Name, Status, StartType
Set-Service -Name WebClient -StartupType Automatic
Start-Service -Name WebClient

From an elevated command prompt the equivalent needs a space after each =, because Microsoft's sc.exe config reference states that a space is required between an option and its value and that omitting it makes the operation fail — which is exactly what the widely copied start=auto does:

cmd

sc.exe config WebClient start= auto
sc.exe start WebClient

On Windows Server the redirector is not installed until you add the Desktop Experience feature. On Windows 11 it is installed; it is only asleep.

2. Allow Basic credentials on an http:// endpoint

Windows 10 and 11 will not send Basic credentials to a plaintext endpoint by default, and they fail without prompting, which is why this cause is so often misdiagnosed as a password problem. The control is a DWORD named BasicAuthLevel under HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters. Microsoft documents 0 as disabled, 1 as "Basic authentication is enabled for SSL web sites only", 2 as "enabled for SSL and non-SSL web sites", with 1 as the default.

cmd

reg add "HKLM\SYSTEM\CurrentControlSet\Services\WebClient\Parameters" /v BasicAuthLevel /t REG_DWORD /d 2 /f
net stop WebClient
net start WebClient

The restart is mandatory: the documentation notes that after changing any value in that key the Web Client must be restarted or the computer rebooted. Microsoft also calls Basic authentication over a non-SSL connection "strongly discouraged", and it is right — the credentials travel in clear text. For a loopback address the traffic never leaves the machine; for anything routed, use HTTPS and leave the value at 1.

3. Know the limits before you hit them

Every value below is from Microsoft's WebDAV redirector documentation, in the same registry key, and every one of them is a real number rather than folklore.

WebClient registry settings, with Microsoft's documented defaults
ValueWhat it controlsDefault
FileSizeLimitInBytesMaximum size the service allows for file transfers50,000,000 decimal (50 MB)
FileAttributesLimitInBytesMaximum size of all properties on one collection1,000,000 decimal (1 MB)
SendReceiveTimeoutInSecTimeout after issuing a request such as GET /file.ext60
InternetServerTimeoutInSecConnection timeout for non-local servers30
LocalServerTimeoutInSecConnection timeout for a local server15
ServerNotFoundCacheLifeTimeInSecHow long a host stays cached as non-WebDAV60
SupportLockingWhether the service supports LOCK1
BasicAuthLevelBasic authentication: off, SSL only, or both1

Two of these deserve attention. FileSizeLimitInBytes is the famous 50 MB ceiling; it is a DWORD, so the highest value it can hold is 4,294,967,295 bytes, which is why WebDAV mappings on Windows can never move a 5 GB file however you configure them. See the Windows WebDAV 50 MB limit for the full treatment. And ServerNotFoundCacheLifeTimeInSec is the reason your fix "didn't work": for 60 seconds the service returns a cached failure without contacting the server at all.

4. Map it from the command line while debugging

The wizard gives you a sentence; net use gives you a number, and numbers are searchable. Microsoft's walkthrough uses the plain URL form, and the UNC form is documented as \\server[@SSL][@port][\path], with @SSL for HTTPS and @port required for anything other than 80 and 443:

cmd

net use Z: https://dav.example.com/files /user:alice *
net use Y: \\dav.example.com@SSL@8443\DavWWWRoot\files /user:alice *

The trailing * makes Windows prompt for the password instead of putting it in your command history. If the answer is System error 67, read net use error 67; the File Explorer spelling of the same failure is 0x80070043; and the wizard's own refusal has its own page, the folder you entered does not appear to be valid.

5. Mappings that vanish at logoff

This is documented behaviour, not a Windows 11 regression: since Windows 7, Basic authentication credentials cannot be persisted by Credential Manager, so a Basic-auth WebDAV mapping has to be re-created rather than restored. Microsoft's own troubleshooting guidance for this is a logon script that re-issues the command.

powershell

if (-not (Test-Path Y:)) {
  net use Y: http://127.0.0.1:3211/ /user:anystorage
}

What "deprecated" means for you

Deprecated is not removed. Microsoft's own definition is that the feature is no longer being actively developed and might be removed in a future update; the WebClient entry has stood since November 2023 with no removal date. Practically, that means three things: no new features, no performance work, and no guarantee for the next major release.

It also means the sensible long-term answer is not to depend on the Windows redirector for bulk work. A client that talks to storage APIs directly has no service to start, no BasicAuthLevel, and no 4 GB ceiling. AnyStorage (v0.2.24; macOS 11+, Windows 10+, Ubuntu 20.04+) takes the middle path: it moves files over the storage protocol itself — S3-compatible endpoints with path-style and custom region, SFTP with key authentication, WebDAV — and when you do want a drive letter, it serves one from a built-in local WebDAV server on http://127.0.0.1:3211, with no FUSE, WinFsp or macFUSE driver to install. Every connection open in the app appears as a folder under that root, and the free tier allows two connections. The rules above still apply to that mapping, since Windows treats a loopback WebDAV server like any other: WebClient running, BasicAuthLevel at 2.

Is WebDAV removed in Windows 11 24H2?

No. It is deprecated, not removed, and the service still ships. What changed is that it does not start on its own, so you have to enable it once per machine.

Why does my NAS work in a browser but not as a drive?

Because the redirector asks a different question. It sends OPTIONS and expects a DAV response header, then PROPFIND. A server can serve pages happily and still not advertise WebDAV on the path you typed.

Can I raise the 50 MB limit safely?

Yes, within reason. FileSizeLimitInBytes is a DWORD, so 4294967295 is the maximum, and changing it needs a WebClient restart or a reboot. It does not make the transfer faster, only permitted.

Does HTTPS fix the timeouts?

No. The timeouts are SendReceiveTimeoutInSec (60 seconds), InternetServerTimeoutInSec (30) and LocalServerTimeoutInSec (15), and they apply regardless of scheme. A slow PROPFIND on a directory with thousands of entries will hit them either way.

Next steps