• Status: Solved
  • Priority: Medium
  • Security: Public
  • Views: 166
  • Last Modified:

What is the true way to turn SMB signing off

General question. When my tech turns Smb off, she changes two group policy settings. For domain member and Microsoft server, disable Smb signing for both. Do I also disable Microsoft client?

Thanks
0
dronethought
Asked:
dronethought
1 Solution
 
David Johnson, CD, MVPOwnerCommented:
You are trading security for a small increase in speed. Signing is only enabled for Domain Controllers by default. This ensures that the clients get the correct group policy without a man in the middle attack.

If the server is not signed then the clients must also be set to signing not required or they will not update group policy.

This can be set via group policy.   Please reference this technet document for details: http://blogs.technet.com/b/josebda/archive/2010/12/01/the-basics-of-smb-signing-covering-both-smb1-and-smb2.aspx
0
 
dronethoughtAuthor Commented:
Thank you.
0

Featured Post

Get your problem seen by more experts

Be seen. Boost your question’s priority for more expert views and faster solutions

Tackle projects and never again get stuck behind a technical roadblock.
Join Now