The Windows SMB client must be enabled to perform SMB packet signing when possible.

Overview

Finding ID	Version	Rule ID	IA Controls	Severity
V-1166	WN12-SO-000029	SV-52874r2_rule		Medium

Description
The server message block (SMB) protocol provides the basis for many network operations. If this policy is enabled, the SMB client will request packet signing when communicating with an SMB server that is enabled or required to perform SMB packet signing.

STIG	Date
Windows Server 2012/2012 R2 Domain Controller Security Technical Implementation Guide	2017-04-28

Details

Check Text ( None )
None

Fix Text (F-45800r1_fix)
Configure the policy value for Computer Configuration -> Windows Settings -> Security Settings -> Local Policies -> Security Options -> "Microsoft network client: Digitally sign communications (if server agrees)" to "Enabled".