Home
Topics
Microsoft Windows desktop operating systems security management
Network intrusion detection and prevention and malware removal
How to manually enable SMB signing

How to manually enable SMB signing

Is it advisable to only enable SMB signing for domain controllers? We are considering disabling SMB signing for file and print servers. Would this action help to reduce the risk of attack?

You should enable SMB signing on all systems to truly secure all Windows communications on your network. In fact, if you don't enable it on all systems, you may experience problems on some clients. It's enabled on Server 2003 by default, but you must enable it manually on all other versions of Windows.

Perform the following steps to enable SMB signing:

Inset the REG_WORD entries 'RequireSecuritySignature' and 'EnableSecuritySignature' with a value of 1 to these registry keys:

Windows NT4 clients: HKLM/SYSTEM/CurrentControlSet/Services/Rdr/Parameters

Windows XP/2000 clients: HKLM/SYSTEM/CurrentControlSet/Services/LanManWorkstation/Parameters

Windows NT4/2000/2003 servers: HKLM/SYSTEM/CurrentControlSet/Services/LanManServer/Parameters

For Samba servers, set "server signing=mandatory" in the smb.conf file.

More News and Tutorials

Articles

Related glossary terms

Terms for Whatis.com - the technology online dictionary
- stack overflow

This was first published in December 2004

Join the conversationComment

Share

Comments

Results

Contribute to the conversation

All fields are required. Comments will appear at the bottom of the article.

Back to top

More from Related TechTarget Sites

Virtual Desktop
Windows Server
Windows IT
Exchange

Virtual Desktop
- Citrix simplifies VDI again with XenDesktop 7-XenApp combo
  
  Citrix VDI admins can deploy and manage XenDesktop and XenApp under the same architecture, something they expected for years.
- Citrix kills its Application Streaming feature, directs users to App-V
  
  Citrix has officially ceased development and support for its Application Streaming feature, and has directed IT pros to use Microsoft App-V instead.
- Citrix expected to tackle mobile application delivery, VDI costs
  
  As Citrix Synergy 2013 kicks off in Anaheim, attendees hope to learn about new desktop and application delivery strategies for the mobile world.
Windows Server
- Microsoft delivers patch updates for Windows Server 2012, Windows 8
  
  Microsoft delivered two critical and eight important bulletins in May's Patch Tuesday release, fixing issues in Windows Server 2012 and Office apps.
- Windows Azure Active Directory steps out of the shadows
  
  As Windows Azure Active Directory moves into general availability, we look at how it can help admins manage user authentication in the cloud.
- Steps to read XML files with PowerShell
  
  Wondering how to get PowerShell to read XML files? Our expert explains a few methods you could use.
Windows IT
- How to advance your cloud skills and get ahead of the gap
  
  There may be a growing shortage of IT pros with cloud skills, but you can take action now and become a valuable asset with the right skills.
- Prepare for a SharePoint 2013 upgrade with five tips
  
  Considering an upgrade to SharePoint 2013? Find out the answers to the most common questions IT pros will ask before making the jump.
- Prioritize your IT tasks and finally conquer your to-do list
  
  It's easy to feel overwhelmed by a growing to-do list of IT tasks, but there are easy ways you can decide what to tackle first and what can wait.
Exchange
- Dismounted Exchange 2010 database refuses to mount
  
  A frustrated admin wants to know how to remount his Exchange 2010 database after discovering event ID 5003. One of our experts offers proper guidance.
- Exchange Global Address List updates not replicating to sites
  
  For some reason, an admin's Exchange Global Address List updates are not updating to sites. Our expert has several suggestions to fix the issue.
- Replacing Forefront TMG: Alternate reverse-proxy options for Exchange
  
  With the discontinuation of Forefront TMG, Exchange admins are left wondering what to do moving forward. The available options may surprise you.

All Rights Reserved,Copyright 2008 - 2013, TechTarget