cancel
Showing results for 
Show  only  | Search instead for 
Did you mean: 
LP
Engaged Sweeper II

I'm looking to create a couple reports:

  • Windows: SMB Signing Disabled
  • Windows: NTLMv1 Enabled
  • Windows: NTLMv2 Enabled

Is this possible with Lansweeper? Is this data captured?

1 ACCEPTED SOLUTION
Mister_Nobody
Honored Sweeper II

Add Registry scanning for smb signing check

HKLM 

SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters RequireSecuritySignature

System\CurrentControlSet\Services\LanManServer\Parameters EnableSecuritySignature

For NTLM 1,2 add

HKLM

SYSTEM\CurrentControlSet\Control\Lsa LmCompatibilityLevel

View solution in original post

3 REPLIES 3
Mister_Nobody
Honored Sweeper II
Mister_Nobody
Honored Sweeper II

Add Registry scanning for smb signing check

HKLM 

SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters RequireSecuritySignature

System\CurrentControlSet\Services\LanManServer\Parameters EnableSecuritySignature

For NTLM 1,2 add

HKLM

SYSTEM\CurrentControlSet\Control\Lsa LmCompatibilityLevel

Obi_1_Cinobi
Lansweeper Tech Support
Lansweeper Tech Support

Hello there!

While we do not explicitly scan these protocols and thus cannot report on them, there might be some workarounds to consider: