search

2.3.9.2 (L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'E

2.3.9.2 (L1) Ensure 'Microsoft network server: Digitally sign communications (always)' is set to 'Enabled' (Automated)

Microsoft network server: Digitally sign communications (always) This security setting determines whether packet signing is required by the SMB server component. The server message block (SMB) protocol provides the basis for Microsoft file and print sharing and many other networking operations, such as remote Windows administration. To prevent man-in-the-middle attacks that modify SMB packets in transit, the SMB protocol supports the digital signing of SMB packets. This policy setting determines whether SMB packet signing must be negotiated before further communication with an SMB client is permitted.

LogoLocalPoliciesSecurityOptions Policy CSPMicrosoftLearnchevron-right
Previous*2.3.9.1 (L1) Ensure 'Microsoft network server: Amount of idle time required before suspending sessNext2.3.9.3 (L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is

Last updated