Microsoft releases Windows 11 Canary version, introducing SMB signing requirements to strengthen security

News on June 5, Microsoft recently released Windows 11 Canary version, which introduces the requirement for Server Message Block (SMB) signing of all connections. This move is to further enhance Windows and Windows Server security. SMB is Microsoft's network communication protocol, and its signature function enabled by default will become an important part of the security of the Windows operating system.

According to the editor’s understanding, Microsoft Chief Project Manager Ned Pyle explained the reason for the move in a blog post and revealed that the change will be gradually applied to more versions of Windows and Windows Server operating systems in the future.

Although Windows and Windows Server versions have supported SMB signing for a long time, but Microsoft has recently stepped up its push to make SMB signing the default to ensure its security in modern environments.

Microsoft introduced an SMB authentication rate limiter in a March 2022 preview build that sets a 2-second timeout limit for each failed NTLM authentication attempt. This measure theoretically makes it more difficult for hackers to attempt to log into a system multiple times.

In January 2023, Microsoft said that Windows 11 Pro will disable the insecure SMB guest authentication fallback. Today, Ned Pyle said the new move to make SMB signing the default option is part of an effort to improve the security of Windows and Windows Server.

Ned Pyle added: “In the coming months, this change to signature defaults is expected to be rolled out to Professional, Education, and other editions of Windows, as well as Server. Depending on how the preview build goes, this setting will eventually become part of the main release. ”

In addition, according to Pyle, future Windows versions will also continue to introduce more secure SMB default settings and multiple new SMB security options. He emphasized that security cannot be ignored, although these new security settings It may have an impact on application compatibility, but Windows has always focused on ensuring user-friendliness.

This move by Microsoft demonstrates its determination to protect users and system security, and will continue to strengthen Windows and Windows Server security. Users can expect additional security features to ensure the security of their computing environment.

The above is the detailed content of Microsoft releases Windows 11 Canary version, introducing SMB signing requirements to strengthen security. For more information, please follow other related articles on the PHP Chinese website!