The 'Microsoft network server: Digitally sign communications (always)' setting should be configured correctly.
[enabled/disabled]
(1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\Microsoft network server: Digitally sign communications (always)
oval:org.secpod.oval:def:8838
SCAP Repo OVAL Definition
2013-01-21