for additional security, SMB signing can be enabled on windows servers. however, according to microsoft and other sources, enabling this feature can degrade file transfer performance up to 15%. so it may not be a good idea to enable it on heavily used file servers…but might as well enable it on servers that do not experience a lot of SMB traffic.

here’s where to enable it:
Local Security Policy->Security Settings->Local Policies->Security Options
Microsoft network server: Digitally sign communications (always)
or
Microsoft network server: Digitally sign communications (if client agrees)

source:
http://technet.microsoft.com/en-us/library/cc731957.aspx

Comments are closed.