CCE-10992-6| Platform: win2k8r2 | Date: (C)2012-03-13 (M)2017-10-07 |
The 'Microsoft network server: Digitally sign communications (always)' setting should be configured correctly.
Parameter:
enabled/disabled
Technical Mechanism:
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Digitally sign communications (always)
(2) Registry Key: HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\LanManServer\Parameters\requiresecuritysignature
References:
| Resource Id | Reference |
|---|
| Microsoft Security Compliance Manager (SCM) Baselines and Settings Packs | Microsoft Tool: Security Compliance Manager (SCM)
Microsoft Baseline: Windows Server 2008 R2
SCM URL: http://go.microsoft.com/fwlink/?LinkId=113940 |
| SCAP Repo OVAL Definition | oval:org.secpod.oval:def:8838 |
