Share via

How to enforce SMB signing on Windows 2012 server

Kartheen E 51 Reputation points
2021-07-20T03:54:28.627+00:00

Could you let me know how to enforce SMB signing on windows server 2012 directly via registry, not via group policy as we do not use group policy for this server.

Windows for business | Windows Server | User experience | Other
0 comments
Answer accepted by question author
  1. SUNOJ KUMAR YELURU 18,246 Reputation points MVP Volunteer Moderator
    2021-07-20T05:11:27.427+00:00

    Hi @Kartheen E

    SMB signing and security signatures can be configured for the Workstation service and for the Server service. The Workstation service is used for outgoing connections. The Server service is used for incoming connections.

    When SMB signing is enabled, it is possible for clients that support SMB signing to connect and it is also possible for clients that do not support SMB signing to connect. When SMB signing is required, both computers in the SMB connection must support SMB signing. The SMB connection is not successful if one computer does not support SMB signing.

    Policy is named "Digitally sign server communication (always)" and both map to the following registry key:
    HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanManServer\Parameters

    Value Name: RequireSecuritySignature
    Data Type: REG_DWORD
    Data: 0 (disable), 1 (enable)

    If the Answer is helpful, please click Accept Answer and up-vote, this can be beneficial to other community members.

    1 person found this answer helpful.
    0 comments

2 additional answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Kartheen E 51 Reputation points
    2021-07-20T14:02:59.463+00:00

    @SUNOJ KUMAR YELURU @Anonymous - Thank you both for your answer and clarification.

  2. Anonymous
    2021-07-20T06:10:50.987+00:00

    Hi ,

    The following article talking about how to enable SMB signing , you could have a look:

    Overview of Server Message Block signing

    Please note: if there is an overriding domain policy, a local registry value change does not function correctly.

    Client: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanWorkStation\Parameters\RequireSecuritySignature

    116162-1.png

    Server: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanmanServer\Parameters\RequireSecuritySignature

    116048-2.png

    Best Regards,
    Candy

    --------------------------------------------------------------

    If the Answer is helpful, please click "Accept Answer" and upvote it.

    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

    0 comments

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.