Heya folks, Ned here again. Many years ago, we made configuring SMB signing in Windows pretty complicated. Then, years later, we made it even more complicated in an attempt to be less complicated. To...
Updated Nov 09, 2023
Version 14.0
Blog Post
Hi,
We have Server 2008R2 /2012R2 /2016 /2019 /2022, Windows 10/11 clients as domain servers/members.
Also We have Linux / Unix machines too.
1 - For only Servers OU , I will apply a GPO like below. Correct ?
If we have the following settings:
Servers: Member servers are in a separate OU (Servers), with a separate GPO (Servers) assigned.
Microsoft network client: Digitally sign communications (always) = Disabled
Microsoft network server: Digitally sign communications (always) = Disabled
Microsoft network client: Digitally sign communications (if server agrees) = Enabled
Microsoft network server: Digitally sign communications (if client agrees) = Enabled
OR
Microsoft network client: Digitally sign communications (always) = Disabled
Microsoft network server: Digitally sign communications (always) = Enabled
Microsoft network client: Digitally sign communications (if server agrees) = Enabled
Microsoft network server: Digitally sign communications (if client agrees) = Disabled
OR
ALL ENABLED
Microsoft network client: Digitally sign communications (always) = Enabled
Microsoft network server: Digitally sign communications (always) = Enabled
Microsoft network client: Digitally sign communications (if server agrees) = Enabled
Microsoft network server: Digitally sign communications (if client agrees) = Enabled
2 - Is there any a tool to help admins analyze systems and their connectivity, and network speed, and drive speed, and SMB versions installed and come up with a recommendation for the settings?
3- Has anyone else run some benchmarks with SMB signing turned on and seen this performance hit?