Skip to content
ADHardening

Guides tagged

#smb-signing

← Back to all guides
NTLM & Legacy Protocols

Require SMB signing and disable SMBv1 domain-wide

Enforce SMB signing on clients and servers, understand Windows 11 24H2 and Server 2025 defaults, audit SMBv1 use, and remove it without breaking file access.

Foundation
NTLM & Legacy Protocols

Stop NTLM relay: LDAP, SMB signing and LLMNR

Harden LDAP signing, LDAP channel binding, SMB signing, and disable LLMNR/NBT-NS to shut down NTLM relay paths against domain controllers.

Foundation