You can easily configure SMB signing in Windows using Group Policy
Prerequisites: A Windows PC with administrator access
Difficulty Level: Member • Nerd • Platypus
Estimated Time: 5 minutes
Tools Required: A Windows PC with access to Group Policy
Expected Outcome: SMB will require signatures
Steps to Perform
- Press the Windows key or click on the start menu in the lower left-hand corner
- Once the start menu is open type "edit group policy" you should now see a shortcut called Edit Group Policy. Click on it
- If the start menu is open you can start typing to search for something. You do not have to click on anything
- From the left panel, navigate to Computer Configuration>Windows Settings>Security Settings>Local Policies>Security Options
- You should now see a list of policies in the right panel
- Scroll down to "Microsoft network client: Digitally sign communications (always)"
- Set all four of the circled policies above to Enabled by double-clicking on the policies to edit them
- Once each policy is set to Enabled SMB signatures will be required. No reboot is required