Custom Reports: SMB Signing, NTLMv1, and NTLMv2

[LP]

I'm looking to create a couple reports:

• Windows: SMB Signing Disabled
• Windows: NTLMv1 Enabled
• Windows: NTLMv2 Enabled

Is this possible with Lansweeper? Is this data captured?

[Mister_Nobody]

I see topicstarter have solution

https://community.lansweeper.com/t5/general-discussions/combine-registry-reports/td-p/70807

[Mister_Nobody · Accepted solution]

Add Registry scanning for smb signing check

HKLM 

SYSTEM\CurrentControlSet\Services\LanmanServer\Parameters RequireSecuritySignature

System\CurrentControlSet\Services\LanManServer\Parameters EnableSecuritySignature

For NTLM 1,2 add

HKLM

SYSTEM\CurrentControlSet\Control\Lsa LmCompatibilityLevel

[Obi_1_Cinobi]

Hello there!

While we do not explicitly scan these protocols and thus cannot report on them, there might be some workarounds to consider:

• If specific registry keys can confirm the existence of these protocols, you could look into using custom registry scanning, which we can then report on: https://community.lansweeper.com/t5/scanning-your-network/scan-registry-values-with-custom-registry-...
• If certain events can confirm the existence of these protocols, you could look into using event log scanning, which we can then report on: https://community.lansweeper.com/t5/scanning-your-network/scanning-non-error-events/ta-p/64347