Smb2-protocol: Re: [Smb2-protocol] S bit and the signature field

Note: This archive is from the project's previous web site, ethereal.com. This list is no longer active.

From: Jean-Baptiste Marchand <jbm.lists@xxxxxxxxx>
Date: Wed, 8 Feb 2006 12:56:17 +0100
* Stefan (metze) Metzmacher <metze@xxxxxxxxx> [08/02/06 - 10:51]:

> can you explain how to configure vista to do smb signing.

SMB signing can be configured in Windows Vista and Windows "Longhorn"
Server in exactly the same way as in previous versions of Windows.

Using secpol.msc, choosing Security Options under Local Settings, the
following settings must be used:

client-side:

- Microsoft network client: Digitally sign communications (if server
agrees) 
- Microsoft network client: Digitally sign communications (always)

server-side:

- Microsoft network server: Digitally sign communications (if client
agrees)
- Microsoft network server: Digitally sign communications (always)

For a good ressource about SMB signing, see:

http://www.microsoft.com/technet/community/columns/secmgmt/sm0905.mspx

Jean-Baptiste Marchand