Solved

How to enable SMB signing Windows 2008/Windows 7

Posted on 2014-10-07
2
9,206 Views
Last Modified: 2014-10-27
We have had an audit and the auditors have recommended enabling SMB signing on the network. How is this done, and should it be done? We have a windows 2008 DC and 2008 application server, all PC's are Windows 7 Pro.
0
Comment
Question by:350ztn
2 Comments
 
LVL 25

Accepted Solution

by:
Mohammed Khawaja earned 500 total points
ID: 40367325
SMB signing is used to ensure SMB packets are not modified during transit (i.e. man in the middle attack).  By default all Windows server, clients and DCs support SMB signing but is not enabled.  A client will not be able to establish a session with a server that has SMB signing enabled until client agrees to sign SMBs.  SMB signing could result in up to 15% or higher performance degradation as there is overhead with SMB signing.  SMB signing can be enabled either via GPO or registry and you could reference link below:

http://support.microsoft.com/kb/916846

I do not recommend SMB signing unless it is a must or you believe there is a possibility of man in the middle attack in your environment.
0
 

Author Comment

by:350ztn
ID: 40368993
I completely agree and have informed management of the performance issue, they want to enable it to see if the performance loss is noted. So I guess I must move forward with the group policy changes on server and client side. thank you for the link. It looks like at the bottom of that link is where I need to focus, for the group policy changes.
0

Featured Post

Optimizing Cloud Backup for Low Bandwidth

With cloud storage prices going down a growing number of SMBs start to use it for backup storage. Unfortunately, business data volume rarely fits the average Internet speed. This article provides an overview of main Internet speed challenges and reveals backup best practices.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

A safe way to clean winsxs folder from your windows server 2008 R2 editions
This article explains how to install and use the NTBackup utility that comes with Windows Server.
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …

820 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question