Samba SMB Security For Linux & Windows

Code:

Enabling SMB Signed Certificate authentication

Code:

sudo gedit /etc/samba/smb.conf

Look for global and put 2 lines under it save and exit!

Code:

[global]

server signing = auto

server signing = mandatory

# Under global put them 2 lines save and exit then restart samba service deamon!

Code:

sudo service smbd restart

On windows open up group policy editor with admin privaliges!

find the the hive and enable always use service samba digitally signed comms option make sure it is on enabled and then restart both linux and windows machines and test!


Tip you can edit windows settings through group policy editor with admin privs!

Find in hive:

Windows Settings > > Security Settings > Security Options

and look for option called...

Microsoft network access server: Digitally Sign Communications


Change that option to enabled!!

now both sides are setup restart both machines (linux and windows in my video example above)!

And test it out, any issues you can always revert back to how it was, so make a backup or at least make notes!