I'm unsure what changes I need to make, and if there is any impact to environment.

Workstations: Workstations are in their own OU (depending on site), with a separate GPO assigned to those OU's. Microsoft network client: Digitally sign communications (if server agrees) setting is enabled Microsoft network server: Digitally sign communications (if client agrees) setting is enabled. Servers: Member servers are in a separate OU (Servers), with a separate GPO (Servers) assigned. Microsoft network server: Digitally sign communication (if client agrees) is enabled Microsoft network server: Digitally sign communications (always) setting is enabled. Microsoft network client: Digitally sign communication (if server agrees) is enabled Timothy defines what the Group Policy feature and Group Policy objects (GPO) are: mechanisms. Microsoft network client: Digitally sign communications (always) is disabled Join Timothy Pintello for an introduction to creating and managing group policies on a Windows network.

I understand that Domain Controllers have the option enabled: (applied through Default Domain Controller Policy)ĭefault Domain Controller GPO current settings: our settings:

We have an audit requirement to enable SMB signing, which I would like to set through Group Policy.