Windows Server Digital Signing

I've removed advertising from most of this site and will eventually clean up the few pages where it remains.

While not terribly expensive to maintain, this does cost me something. If I don't get enough donations to cover that expense, I will be shutting the site down in early 2020.

If you found something useful today, please consider a small donation.

Some material is very old and may be incorrect today

© August 2003 Tony Lawrence
Fri Aug 15 10:08:11 GMT 2003

Windows 2000 and XP have a feature called "digital signing":

Technet Article on Digital Signing of SMB packets

, which is apparently turned on if the server is functioning as a domain controller.

Samba and other non-Microsoft SMB products don't support this yet, though Samba does have it in the 3.0.0 beta: http://us1.samba.org/samba/whatsnew/samba-3.0.0beta3.html.

As you would expect, if this feature is left turned on, you aren't going to be able to browse to that server with Samba, Visionfs or any other SMB product until the product is updated for this ability. You'll get "tree connect failed" and Access denied messages.

If you aren't exposing SMB traffic to the Internet, and aren't trying to protect against malicious users on your own network, turning this off isn't going to hurt anything. As Windows allows you to configure this setting for a specific computer, you can fine tune this to meet your exact needs.

If you found something useful today, please consider a small donation.

Got something to add? Send me email.

---

Have you tried Searching this site?

This is a Unix/Linux resource website. It contains technical articles about Unix, Linux and general computing related subjects, opinion, news, help files, how-to's, tutorials and more.

Contact us