SV-205827r569188_rule
V-205827
SRG-OS-000423-GPOS-00187
WN19-SO-000190
CAT II
10
Configure the policy value for Computer Configuration >> Windows Settings >> Security Settings >> Local Policies >> Security Options >> "Microsoft network server: Digitally sign communications (always)" to "Enabled".
If the following registry value does not exist or is not configured as specified, this is a finding:
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\
Value Name: RequireSecuritySignature
Value Type: REG_DWORD
Value: 0x00000001 (1)
V-205827
False
WN19-SO-000190
If the following registry value does not exist or is not configured as specified, this is a finding:
Registry Hive: HKEY_LOCAL_MACHINE
Registry Path: \SYSTEM\CurrentControlSet\Services\LanManServer\Parameters\
Value Name: RequireSecuritySignature
Value Type: REG_DWORD
Value: 0x00000001 (1)
M
2907