During connectio nsetup it's possible to switch off SMB signing regardless of policy setting.
vulners.com/securityvulns/securityvulns:doc:3870
vulners.com/securityvulns/securityvulns:doc:4003