Intune Endpoint Hardening
Ctrlk
  • Intune Endpoint Hardening
    • 2. Local Policies
      • 2.2 User Rights Assignment
      • 2.3 Security Options
        • 2.3.1 Accounts
        • 2.3.2 Audit
        • 2.3.3 DCOM
        • 2.3.4 Devices
        • 2.3.5 Domain controller
        • 2.3.6 Domain member
        • 2.3.7 Interactive logon
        • 2.3.8 Microsoft network client
          • 2.3.8.1 (L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'E
          • 2.3.8.2 (L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is
          • 2.3.8.3 (L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers
        • 2.3.9 Microsoft network server
    • Account Protection
    • Auditing and Logs
    • Identification and Authentication
    • 17. Advanced Audit Policy Configuration
    • 18. Administrative Templates (Computer)
Powered by GitBook
On this page
  1. Intune Endpoint Hardening
  2. 2. Local Policies
  3. 2.3 Security Options

2.3.8 Microsoft network client

2.3.8 Microsoft network client

2.3.8.1 (L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'E2.3.8.2 (L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is2.3.8.3 (L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers
Previous2.3.7.9 (L1) Ensure 'Interactive logon: Smart card removal behavior' is set to 'Lock Workstation' oNext2.3.8.1 (L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'E

Last updated 2 years ago