The 'Microsoft network client: Digitally sign communications (if server agrees)' setting should be configured correctly.
[enabled/disabled]
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network client: Digitally sign communications (if server agrees)
oval:org.secpod.oval:def:8830
SCAP Repo OVAL Definition
2013-01-21