Test‐MicrosoftNetworkServerEnableSecuritySignature

Test-MicrosoftNetworkServerEnableSecuritySignature

SYNOPSIS

2.3.9.3 (L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set to 'Enabled'

DESCRIPTION

This policy setting determines whether the SMB server will negotiate SMB packet signing with clients that request it. If no signing request comes from the client, a connection will be allowed without a signature if the "Microsoft network server: Digitally sign communications (always)" setting is not enabled.

EXAMPLE

EXAMPLE 1

Test-MicrosoftNetworkServerEnableSecuritySignature

Number    Name                                                                                                Source                    Pass    
--------- ------------------                                                                                  ------                    ----    
2.3.9.3   (L1) Ensure 'Microsoft network server: Digitally sign communications (if client agrees)' is set ... Group Policy Settings     True