Re: Microsoft Network Server: Digitally Sing Communications

I had to disable it in our network only because one of the workstations is
still running Win95 and couldn't log on to domain without disabling SMB
signing ,I can see no reall security threart exists ,you can also check this
funny article here:
http://msmvps.com/blogs/kwsupport/archive/2005/04/02/40653.aspx

"Tom" <vanderaatom@xxxxxxxxxxx> wrote in message
news:1e0548a0-2f3e-44c6-8910-f8b4eac73e36@xxxxxxxxxxxxxxxxxxxxxxxxxxxxxxx
Hi,

For MAC integration in a Windows 2003 domain we would like to change
the Default Domain Controllers Policy setting "Microsoft Network
Server: Digitally sign Communication (if client agrees" to disabled
I wonder what the real danger is setting it to disabled. I've read a
lot articles about SMB signing, but couldn't find any real example of
potential dangers and risks

Thanks !



.

Relevant Pages

  • Re: Running the network stack without Giant -- change in default coming
    ... > to allow the network stack to run in parallel on multiple processors ... > currently unsafe without the Giant lock turned on. ... > configuration for testing out the impact of disabling Giant on MP ...
    (freebsd-current)
  • RE: Strange Irregular DNS/Networking Problems
    ... Disable offloading in the network adapter properties ... After disabling all these things file transfers across the network are a lot ... My network is not a complicated set up and only has one domain controller. ... I tried doing a net stop server after the network stalled as from an article ...
    (microsoft.public.windows.server.dns)
  • Re: Slow Network Speed from 2008 Server
    ... Network Adaptor properties which are a bit scary. ... I'm running AD on it as well as SQL Server 2005. ... that the DHCP didn't work. ...
    (microsoft.public.windows.server.networking)
  • Re: SMB packet and secure channel signing
    ... You know, in all the times that you and I have the debate on SMB Signing, ... > Optionally you can do "if client agrees" and thus the signing will be ... > Just don't screw up in the process of disabling these suckers. ... SMB Signing puts a tag on each and every network packet ...
    (microsoft.public.windows.server.sbs)
  • Re: Mei Chan [MSFT]
    ... a password or add a second account. ... Just for kicks you could try setting up the network with Netbeui or ... You could try disabling the Microsft services but be careful, ... >> services tab are by far the most important. ...
    (microsoft.public.windowsxp.network_web)