server signing

This controls whether the client is allowed or required to use SMB1 and SMB2 signing. Possible values
are default, auto, mandatory
and disabled.


By default, and when smb signing is set to
default, smb signing is required when
is active directory
domain controller and disabled otherwise.

When set to auto, SMB1 signing is offered, but not enforced.
When set to mandatory, SMB1 signing is required and if set
to disabled, SMB signing is not offered either.

For the SMB2 protocol, by design, signing cannot be disabled. In the case
where SMB2 is negotiated, if this parameter is set to disabled,
it will be treated as auto. Setting it to mandatory
will still require SMB2 clients to use signing.

Supported on: At least Microsoft Windows 7 or Windows Server 2008 family

server signing

Registry HiveHKEY_LOCAL_MACHINE
Registry PathSoftware\Policies\Samba\smb_conf\server signing
Value Nameserver signing
Value TypeREG_SZ
Default Valuedefault

samba.admx

Administrative Templates (Computers)