SMB Signing

Steps to enable Server Message Block (SMB) signing on NT Server.

ITPro Today

July 31, 1997

1 Min Read
ITPro Today logo in a gray background | ITPro Today

To enable or require Server Message Block (SMB) signing on NT Server,run regedit32 and perform the following steps:

  1. Locate HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServices
    LanmanServerParameters

  2. Click Add Value on the Edit menu.

  3. Add the following two values:

    Value Name: EnableSecuritySignature
    Data Type: REG_DWORD
    Data: 0 (disable), 1 (enable)
    [Note: The default is 0 (disable)]

    Value Name: RequireSecuritySignature
    Data Type: REG_DWORD
    Value: 0 (disable), 1 (enable)
    [Note: The default is 0 (disable)]

  4. Click OK, and then quit the Registry editor.

  5. Shut down and restart NT.

You can find these steps in Microsoft's Knowledge Base article Q161372 onyour TechNet CD-ROM or on the Web, http://www.microsoft.com/kb.

The Registry key for NT Workstation is different from the key for NTServer. You can find it in HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesRdrParameters. The necessary Value options are the same as thosefor NT Server, so locate and use the NT Workstation key and follow steps 2through 5.

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like