To enable or require Server Message Block (SMB) signing on NT Server, run regedit32 and perform the following steps:

  1. Locate HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\
    LanmanServer\Parameters
  2. Click Add Value on the Edit menu.
  3. Add the following two values:

    Value Name: EnableSecuritySignature
    Data Type: REG_DWORD
    Data: 0 (disable), 1 (enable)
    \[Note: The default is 0 (disable)\]

    Value Name: RequireSecuritySignature
    Data Type: REG_DWORD
    Value: 0 (disable), 1 (enable)
    \[Note: The default is 0 (disable)\]

  4. Click OK, and then quit the Registry editor.
  5. Shut down and restart NT.

You can find these steps in Microsoft's Knowledge Base article Q161372 on your TechNet CD-ROM or on the Web, http://www.microsoft.com/kb.

The Registry key for NT Workstation is different from the key for NT Server. You can find it in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControl Set\Services\Rdr\Parameters. The necessary Value options are the same as those for NT Server, so locate and use the NT Workstation key and follow steps 2 through 5.