Solved

How to enable SMB signing Windows 2008/Windows 7

Posted on 2014-10-07
2
8,441 Views
Last Modified: 2014-10-27
We have had an audit and the auditors have recommended enabling SMB signing on the network. How is this done, and should it be done? We have a windows 2008 DC and 2008 application server, all PC's are Windows 7 Pro.
0
Comment
Question by:350ztn
2 Comments
 
LVL 25

Accepted Solution

by:
Mohammed Khawaja earned 500 total points
ID: 40367325
SMB signing is used to ensure SMB packets are not modified during transit (i.e. man in the middle attack).  By default all Windows server, clients and DCs support SMB signing but is not enabled.  A client will not be able to establish a session with a server that has SMB signing enabled until client agrees to sign SMBs.  SMB signing could result in up to 15% or higher performance degradation as there is overhead with SMB signing.  SMB signing can be enabled either via GPO or registry and you could reference link below:

http://support.microsoft.com/kb/916846

I do not recommend SMB signing unless it is a must or you believe there is a possibility of man in the middle attack in your environment.
0
 

Author Comment

by:350ztn
ID: 40368993
I completely agree and have informed management of the performance issue, they want to enable it to see if the performance loss is noted. So I guess I must move forward with the group policy changes on server and client side. thank you for the link. It looks like at the bottom of that link is where I need to focus, for the group policy changes.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

When you start your Windows 10 PC and got an "Operating system not found" error or just saw  "Auto repair for startup" or a blinking cursor with black screen. A loop for Auto repair will start but fix nothing.  You will be panic as there are no back…
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This Micro Tutorial will teach you how to the overview of Microsoft Security Essentials. This is a free anti-virus software that guards your PC against viruses, spyware, worms, and other malicious software. This will be demonstrated using Windows…
This Micro Tutorial will give you a basic overview of Windows DVD Burner through its features and interface. This will be demonstrated using Windows 7 operating system.

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question