{"id":54,"date":"2018-10-09T09:17:40","date_gmt":"2018-10-09T09:17:40","guid":{"rendered":"https:\/\/purepcs.co.uk\/kb\/?p=54"},"modified":"2018-10-09T09:17:40","modified_gmt":"2018-10-09T09:17:40","slug":"group-policy-policies-for-llmnr-and-nbt-ns","status":"publish","type":"post","link":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/","title":{"rendered":"Group Policy: Policies for LLMNR and NBT-NS"},"content":{"rendered":"<p>Recently there was a requirement to disable both LLMNR , WPAD and NBT-NS on our domain computers. As we already disable WPAD with the use of the zScaler proxy app, we could discount that one and move onto a solution for the remaining protocols.<\/p>\n<p>Disabling LLMNR can be done using Group Policy, simply fire up your policy editor (domain or local) and navigate to the following policy: <strong>Computer Configuration &gt; Administrative Templates &gt; Network &gt; DNS Client<\/strong> &#8211; Make sure &#8220;Turn Off Multicast Name Resolution&#8221; is set to Enabled.<\/p>\n<p>Close the editor, run a GPupdate \/Force on the client machine and the setting should take effect.<\/p>\n<p>Disabling NetBios \/ NBT-NS is not controlled by a standard admin template and instead we have to set a startup script in Group Policy and store a powershell script to make the changes in an accessible area.<\/p>\n<p>The PowerShell: save the following in <strong>DOMAIN\\Policies\\{GUID}\\Machine\\Scripts\\Startup\\disable-nbt.ps1<\/strong><\/p>\n<pre>$regkey = \"HKLM:SYSTEM\\CurrentControlSet\\services\\NetBT\\Parameters\\Interfaces\"\r\nGet-ChildItem $regkey |foreach { Set-ItemProperty -Path \"$regkey\\$($_.pschildname)\" -Name NetbiosOptions -Value 2 -Verbose}<\/pre>\n<p>The script will iterate through the Child Items of the &#8220;HKLM\\SYSTEM\\CurrentControlSet\\services\\NetBT\\Parameters\\Interfaces&#8221; key and set the value for NetbiosOptions to &#8220;2&#8221; (Disabled) for all installed network adapters.<\/p>\n<p>Now set a startup policy in: <strong>Computer Configuration &gt; Policies &gt; Windows Settings &gt; Scripts &gt; Startup &gt; PowerShell Scripts <\/strong>referencing the powershell script saved from above.<\/p>\n<p>We saw some failure issues with machines unable to access the starup scripts directory on the domain, adding Domain Computers for Read and Execute access resolved this issue and allowed all mahcines to pickup the scripts correctly.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>Recently there was a requirement to disable both LLMNR , WPAD and NBT-NS on our domain computers. As we already disable WPAD with the use<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[37,6],"tags":[38,39,41,40,42],"class_list":["post-54","post","type-post","status-publish","format-standard","hentry","category-group-policy","category-powershell","tag-gpo","tag-llmnr","tag-nbt","tag-netbios","tag-wpad"],"yoast_head":"<!-- This site is optimized with the Yoast SEO plugin v21.5 - https:\/\/yoast.com\/wordpress\/plugins\/seo\/ -->\n<title>Group Policy: Policies for LLMNR and NBT-NS - Pure PC&#039;s<\/title>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/\" \/>\n<meta property=\"og:locale\" content=\"en_GB\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Group Policy: Policies for LLMNR and NBT-NS - Pure PC&#039;s\" \/>\n<meta property=\"og:description\" content=\"Recently there was a requirement to disable both LLMNR , WPAD and NBT-NS on our domain computers. As we already disable WPAD with the use\" \/>\n<meta property=\"og:url\" content=\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/\" \/>\n<meta property=\"og:site_name\" content=\"Pure PC&#039;s\" \/>\n<meta property=\"article:published_time\" content=\"2018-10-09T09:17:40+00:00\" \/>\n<meta name=\"author\" content=\"purepcs\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"purepcs\" \/>\n\t<meta name=\"twitter:label2\" content=\"Estimated reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"1 minute\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/\"},\"author\":{\"name\":\"purepcs\",\"@id\":\"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/d93eda5f74d1012b66a00b4518a0b089\"},\"headline\":\"Group Policy: Policies for LLMNR and NBT-NS\",\"datePublished\":\"2018-10-09T09:17:40+00:00\",\"dateModified\":\"2018-10-09T09:17:40+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/\"},\"wordCount\":257,\"commentCount\":0,\"publisher\":{\"@id\":\"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/d93eda5f74d1012b66a00b4518a0b089\"},\"keywords\":[\"GPO\",\"LLMNR\",\"NBT\",\"NetBios\",\"WPAD\"],\"articleSection\":[\"Group Policy\",\"Powershell\"],\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/\",\"url\":\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/\",\"name\":\"Group Policy: Policies for LLMNR and NBT-NS - Pure PC&#039;s\",\"isPartOf\":{\"@id\":\"https:\/\/purepcs.co.uk\/kb\/#website\"},\"datePublished\":\"2018-10-09T09:17:40+00:00\",\"dateModified\":\"2018-10-09T09:17:40+00:00\",\"breadcrumb\":{\"@id\":\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/#breadcrumb\"},\"inLanguage\":\"en-GB\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/purepcs.co.uk\/kb\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Group Policy: Policies for LLMNR and NBT-NS\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/purepcs.co.uk\/kb\/#website\",\"url\":\"https:\/\/purepcs.co.uk\/kb\/\",\"name\":\"Pure PC&#039;s\",\"description\":\"Ramblings, Knowledge and Musings\",\"publisher\":{\"@id\":\"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/d93eda5f74d1012b66a00b4518a0b089\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/purepcs.co.uk\/kb\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-GB\"},{\"@type\":[\"Person\",\"Organization\"],\"@id\":\"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/d93eda5f74d1012b66a00b4518a0b089\",\"name\":\"purepcs\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-GB\",\"@id\":\"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/05a7ed7212adca9fab9199df1a61e3092c4eaf22b6e66ab39599144a212ea6f2?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/05a7ed7212adca9fab9199df1a61e3092c4eaf22b6e66ab39599144a212ea6f2?s=96&d=mm&r=g\",\"caption\":\"purepcs\"},\"logo\":{\"@id\":\"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/image\/\"}}]}<\/script>\n<!-- \/ Yoast SEO plugin. -->","yoast_head_json":{"title":"Group Policy: Policies for LLMNR and NBT-NS - Pure PC&#039;s","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/","og_locale":"en_GB","og_type":"article","og_title":"Group Policy: Policies for LLMNR and NBT-NS - Pure PC&#039;s","og_description":"Recently there was a requirement to disable both LLMNR , WPAD and NBT-NS on our domain computers. As we already disable WPAD with the use","og_url":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/","og_site_name":"Pure PC&#039;s","article_published_time":"2018-10-09T09:17:40+00:00","author":"purepcs","twitter_card":"summary_large_image","twitter_misc":{"Written by":"purepcs","Estimated reading time":"1 minute"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/#article","isPartOf":{"@id":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/"},"author":{"name":"purepcs","@id":"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/d93eda5f74d1012b66a00b4518a0b089"},"headline":"Group Policy: Policies for LLMNR and NBT-NS","datePublished":"2018-10-09T09:17:40+00:00","dateModified":"2018-10-09T09:17:40+00:00","mainEntityOfPage":{"@id":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/"},"wordCount":257,"commentCount":0,"publisher":{"@id":"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/d93eda5f74d1012b66a00b4518a0b089"},"keywords":["GPO","LLMNR","NBT","NetBios","WPAD"],"articleSection":["Group Policy","Powershell"],"inLanguage":"en-GB","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/","url":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/","name":"Group Policy: Policies for LLMNR and NBT-NS - Pure PC&#039;s","isPartOf":{"@id":"https:\/\/purepcs.co.uk\/kb\/#website"},"datePublished":"2018-10-09T09:17:40+00:00","dateModified":"2018-10-09T09:17:40+00:00","breadcrumb":{"@id":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/#breadcrumb"},"inLanguage":"en-GB","potentialAction":[{"@type":"ReadAction","target":["https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/purepcs.co.uk\/kb\/group-policy-policies-for-llmnr-and-nbt-ns\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/purepcs.co.uk\/kb\/"},{"@type":"ListItem","position":2,"name":"Group Policy: Policies for LLMNR and NBT-NS"}]},{"@type":"WebSite","@id":"https:\/\/purepcs.co.uk\/kb\/#website","url":"https:\/\/purepcs.co.uk\/kb\/","name":"Pure PC&#039;s","description":"Ramblings, Knowledge and Musings","publisher":{"@id":"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/d93eda5f74d1012b66a00b4518a0b089"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/purepcs.co.uk\/kb\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-GB"},{"@type":["Person","Organization"],"@id":"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/d93eda5f74d1012b66a00b4518a0b089","name":"purepcs","image":{"@type":"ImageObject","inLanguage":"en-GB","@id":"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/05a7ed7212adca9fab9199df1a61e3092c4eaf22b6e66ab39599144a212ea6f2?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/05a7ed7212adca9fab9199df1a61e3092c4eaf22b6e66ab39599144a212ea6f2?s=96&d=mm&r=g","caption":"purepcs"},"logo":{"@id":"https:\/\/purepcs.co.uk\/kb\/#\/schema\/person\/image\/"}}]}},"_links":{"self":[{"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/posts\/54","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/comments?post=54"}],"version-history":[{"count":1,"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/posts\/54\/revisions"}],"predecessor-version":[{"id":55,"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/posts\/54\/revisions\/55"}],"wp:attachment":[{"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/media?parent=54"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/categories?post=54"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/purepcs.co.uk\/kb\/wp-json\/wp\/v2\/tags?post=54"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}