Enable or Disable SMB signing on Windows

You can easily configure SMB signing in Windows using Group Policy

Prerequisites: A Windows PC with administrator access

Difficulty Level: Member • Nerd • Platypus

Estimated Time: 5 minutes

Tools Required: A Windows PC with access to Group Policy

Expected Outcome: SMB will require signaturesScreen Shot 2020-03-27 at 5.00.45 PM-1

Steps to Perform 

  1. Press the Windows key or click on the start menu in the lower left-hand corner
  2. Once the start menu is open type "edit group policy" you should now see a shortcut called Edit Group Policy. Click on it
    1. If the start menu is open you can start typing to search for something. You do not have to click on anything
  3. From the left panel, navigate to Computer Configuration>Windows Settings>Security Settings>Local Policies>Security Options
  4. You should now see a list of policies in the right panel
  5. Scroll down to "Microsoft network client: Digitally sign communications (always)"
    thumbnail image 1 of blog post titled 
							Configure SMB Signing with Confidence
  6. Set all four of the circled policies above to Enabled by double-clicking on the policies to edit them
  7. Once each policy is set to Enabled SMB signatures will be required. No reboot is required