Solved

How to enable SMB signing, syn-ack on windows 2008 domain controller

Posted on 2014-09-30
3
161 Views
Last Modified: 2015-02-10
Dear Support team,


Please advice, how we can implement below mentioned on windows 2008 domain controller

 
 
 How to enable

SMB Weaknesses
The SMB signing is disabled on the target systems.  
________________________

How we can set syn-ack

SYN-ACK retransmissions time limit has not been set;
'Turn off Untrusted Content' is not enabled;
________________________________________
 How to and which to services need to be stop

Active Processes
Multiple active processes are running on the system in-scope as listed in Appendix 2.
0
Comment
Question by:tabreed
  • 2
3 Comments
 
LVL 80

Accepted Solution

by:
David Johnson, CD, MVP earned 500 total points
ID: 40356164
Defaults
Enabled by default on DC's, Disabled on Member Servers

Administrative Tools|Local Security Policy.
Local Policies  | Security Options | Microsoft Network Server
Digitally sign communications (always) properties set to enabled

you can also use group policy (the drawback is a 15% network overhead)
0
 

Author Comment

by:tabreed
ID: 40356314
Thanks for your response, but in my DC it is disable. If I enable SMB is there will be any issues and can I enable on other servers like web server ERP server please advice

Thanks
0
 
LVL 80

Assisted Solution

by:David Johnson, CD, MVP
David Johnson, CD, MVP earned 500 total points
ID: 40358657
signing of packets will incur about a 15% overhead, if you need this to comply with an audit then that is what you need to do.
0

Featured Post

Free Tool: IP Lookup

Get more info about an IP address or domain name, such as organization, abuse contacts and geolocation.

One of a set of tools we are providing to everyone as a way of saying thank you for being a part of the community.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Many times while working on a computer regardless of any Operating System, lag and crashes seem to creep in, hindering your working speed. Sometimes, it can also cause your work to be lost unexpectedly and as a result, you are unable to meet your de…
Many admins will agree: WSUS is is a nice invention but using it on the client side when updating a newly installed computer is still time consuming as you have to do several reboots and furthermore, the procedure of installing updates, rebooting an…
Windows 8 comes with a dramatically different user interface known as Metro. Notably missing from the new interface is a Start button and Start Menu. Many users do not like it, much preferring the interface of earlier versions — Windows 7, Windows X…
Windows 8 came with a dramatically different user interface known as Metro. Notably missing from that interface was a Start button and Start Menu. Microsoft responded to negative user feedback of the Metro interface, bringing back the Start button a…

685 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question