To enable or require Server Message Block (SMB) signing on NT Server,
run regedit32 and perform the following steps:
- Locate HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
LanmanServer\Parameters
- Click Add Value on the Edit menu.
- Add the following two values:
Value Name: EnableSecuritySignature
Data Type: REG_DWORD
Data: 0 (disable), 1 (enable)
[Note: The default is 0 (disable)]
Value Name: RequireSecuritySignature
Data Type: REG_DWORD
Value: 0 (disable), 1 (enable)
[Note: The default is 0 (disable)]
- Click OK, and then quit the Registry editor.
- Shut down and restart NT.
You can find these steps in Microsoft's Knowledge Base article Q161372 on
your TechNet CD-ROM or on the Web, http://www.microsoft.com/kb.
The Registry key for NT Workstation is different from the key for NT
Server. You can find it in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl
Set\Services\Rdr\Parameters. The necessary Value options are the same as those
for NT Server, so locate and use the NT Workstation key and follow steps 2
through 5.