Blog Post

Storage at Microsoft
4 MIN READ

SMB Signing and Guest Authentication

NedPyle's avatar
NedPyle
Icon for Microsoft rankMicrosoft
Jun 13, 2023
Heya folks, Ned here again. We recently made SMB signing the default in Windows Insider and Windows Server Insider builds. In doing so, we were quickly reminded of a consequence from an old unsafe SM...
Updated Apr 09, 2024
Version 5.0
Jose_Franco's avatar
Jose_Franco
Copper Contributor
Apr 04, 2024

Greetings Ned.

 

Sorry friend, we have a question, recently an auditing company is forcing us to activate the option:


KLM:\SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters -Name "RequireSecuritySignature"

HKLM:\System\CurrentControlSet\Services\LanmanWorkstation\Parameters -Name "RequireSecuritySignature"

 

On both clients and servers

 

We realized through wireshark that some communications are being encrypted without having to activate that option, although we have other communications that are seen in status:

 

Signature: 00000000000000000000000000000000

 

All of our domain controllers currently have this option disabled. Could you tell me if it is dangerous to activate this in our company or what you recommend regarding SMB signing issues. Currently we are already using smb2 and smb1 is rarely used in our company