search

2.3.8.1 (L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'E

2.3.8.1 (L1) Ensure 'Microsoft network client: Digitally sign communications (always)' is set to 'Enabled' (Automated)

Microsoft network client: Digitally sign communications (always) This security setting determines whether packet signing is required by the SMB client component. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB server is permitted.

LogoLocalPoliciesSecurityOptions Policy CSPMicrosoftLearnchevron-right
Previous2.3.8 Microsoft network clientNext2.3.8.2 (L1) Ensure 'Microsoft network client: Digitally sign communications (if server agrees)' is

Last updated