2.3.8.3 (L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers

2.3.8.3 (L1) Ensure 'Microsoft network client: Send unencrypted password to third-party SMB servers' is set to 'Disabled' (Automated)

Description

Microsoft network client: Send unencrypted password to connect to third-party SMB servers If this security setting is enabled, the Server Message Block (SMB) redirector is allowed to send plaintext passwords to non-Microsoft SMB servers that don't support password encryption during authentication. Sending unencrypted passwords is a security risk. Default: Disabled.

LocalPoliciesSecurityOptions Policy CSP - Windows Client ManagementMicrosoftLearn

OMA-URI

./Device/Vendor/MSFT/Policy/Config/LocalPoliciesSecurityOptions/MicrosoftNetworkClient_SendUnencryptedPasswordToThirdPartySMBServers

Recommended Setting

Format: int Value: 0 (Disabled)

Settings Catalog

YES

Local Policies Security Options

Microsoft Network Client Send Unencrypted Password To Third Party SMB Servers