Isticmaalayaasha Windows^(Windows) qaarkood ayaa ka shakisan laba borotokool, NetBIOS over TCP/IP iyo LLMNR . Hab-maamuusyadani waxay mas'uul ka yihiin waafaqidnaanta shabakaddaada iyo nooca Windows ee dhaxalka ah. Si kastaba ha ahaatee, kuwani aad bay ugu nugul yihiin weerarada MITM^{(MITM attacks)} . Sidaa darteed, si loo kordhiyo amniga shabakadooda isticmaaleyaal badan oo Windows ah ayaa u janjeera inay joojiyaan NetBIOS iyo borotokoolka LLMNR^{(LLMNR Protocols.In)} . Maqaalkan, waxaan ku arki doonaa sida loo joojiyo borotokoolka NetBIOS iyo LLMR^{(LLMR Protocols)} iyadoo la adeegsanayo Tifaftiraha Siyaasadda Kooxda^{(Group Policy Editor)} .

Haddii aad rabto in aad damiso NetBIOS iyo LLMR Protocol , waxa fiican in aad wax yar ka ogaato.

LLMNR  ama Link-Local Multicast Name Resolution waa hab-maamuus ay isticmaalaan IPV6   iyo IPV4 macaamiisha si ay u ogaadaan magacyada nidaamyada deriska ah iyada oo aan la isticmaalin DNS Server . Waxaa lagu soo bandhigay Windows Vista waxaana loo adeegsadaa noocyo ka dib. Markaa, haddii DNS aanu la heli karin borotokoolkan ayaa bilaabmaya.

NetBIOS over TCP/IP  waa borotokoolka dabagalka ee LLMNR  waxaana loo adeegsadaa in lagu daabaco LAN oo laga raadiyo agab. Haddii aad rabto inaad wax badan ka ogaato borotokoolkan, fur  Command Prompt  maamule ahaan oo ku qor amarkan soo socda.

nbtstat

Tani waxay soo bandhigi doontaa tirakoobka borotokoolka iyo xiriirka hadda jira ee TCP/IP iyadoo la isticmaalayo NetBIOS TCP TCP/IP .

Dami LLMR^(LLMR) adoo isticmaalaya tifaftiraha Siyaasadda Kooxda^{(Group Policy Editor)}

Waxaad ka joojin kartaa hab-maamuuska LLMR kumbuyuutarka adoo isticmaalaya tifaftiraha Siyaasadda Kooxda^{(Group Policy Editor)} si fudud. Si taas loo sameeyo, billow Run  (Win + R), ku qor " gpedit.msc", oo ku dhufo  Gelida ^(Enter ) (hubi in GPO lagu dabaqo dhammaan goobaha shaqada ee domainka).

Hadda, u gudub meelaha soo socda.

Computer Configuration > Administrative Templates > Network > DNS Client

Laba jeer dhagsii " Demi xallinta magacyada guryaha badan ee caqliga leh^{(Turn off smart multi-homed name resolution)} ", dooro  Enabled,  oo dhagsii  Apply > Ok.

Hadda, weydii dhammaan isticmaalayaasha inay sugaan Siyaasadda Kooxda^{(Group Policy)} in la cusbooneysiiyo. Ama isticmaal amarkan soo socda si aad ugu qasbeyso cusboonaysiinta.

gpupdate /force

Sidan waxaad awood u yeelan doontaa inaad joojiso LLMR adoo isticmaalaya GPO .

Waxaad ka joojin kartaa LLMR gudaha kombayutarka Windows adiga oo kaashanaya amarrada PowerShell . Bilaw PowerShell^{(Launch PowerShell)} maamule ahaan oo fuli amarada soo socda:

New-Item "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT" -Name DNSClient  -Force

New-ItemProperty "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" -Name EnableMultiCast -Value 0 -PropertyType

DWORD  -Force

Dami NetBIOS TCP/IP

Haddii aad tahay Windows 10 ama adeegsade Server , isticmaal tillaabooyinka soo socda si aad disable NetBIOS over TCP/IP .

1. Ka soo saar  Control Panel  ka  Start Menu.
2. Hubi in  Aragtidaada ay ^{(View by )} u dejisay  astaamo waaweyn ^{(Large icons )} oo guji  Network and Sharing Center > Change adapter setting
3. Midig ku dhufo^{(Right-click)} shabakada ku xidhan oo dooro  Properties.
4. Dooro  Internet Protocol Version 4 (TCP/IPv4)  oo guji  Properties.
5. Guji  Advanced > WINS > Disable NetBIOS over TCP/IP > Ok.

Sidan, waxaad ka curyaamisay NetBIOS TCP TCP/IP kumbuyuutarkaaga Windows

Dami NetBIOS^(NetBIOS) TCP / TCP/IP oo wata GPO

Nasiib darro, ma jirto hab gooni ah oo lagu joojin karo NetBIOS TCP TCP/IP oo wata GPO . Si kastaba ha ahaatee, waxaanu  samayn doonaa faylka .ps1  si aanu sidaas oo kale u samayno.

Ku koobbi koodka soo socda ee  Notepad  oo u magacow "disableNetbios.ps1".^{(“disableNetbios.ps1”.)}

$regkey = "HKLM:SYSTEM\CurrentControlSet\services\NetBT\Parameters\Interfaces"

Get-ChildItem $regkey |foreach { Set-ItemProperty -Path "$regkey\$($_.pschildname)" -Name NetbiosOptions -Value 2 -Verbose}

Hadda, fur  Tifaftiraha Siyaasadda Kooxda Maxalliga ^{(Local Group Policy Editor )} oo tag meesha soo socota.

Computer Configuration > Windows Settings > Script (Startup/Shutdown) > Startup

Laba jeer guji  Startup, tag PowerShell Scripts, oo beddel " GPO kan, ku socodsii qoraallada sida soo socota" si aad marka hore u socodsiiso ^{(For this GPO, run scripts in the following order” )} qoraalka  Windows PowerShell.^{(Run Windows PowerShell script first.)}

Guji  ku Add > Browser  oo dooro faylka "disableNetbios.ps1" meesha uu ku yaal . Ugu dambeyntii, dhagsii  Apply > Ok  si aad u socodsiiso qoraalka.

Si loo qasbo isbeddelada midkood dib u bilaabo kombayutarkaaga ama dib u bilaw Adapterkaaga Network^{(Network Adapter)} . Haddii aad rabto inaad aragto isbeddellada, isticmaal amarkan soo socda si aad u hubiso in NetBIOS ee ka TCP/IP ay naafada u tahay Adapters Network^{(Network Adapters)} .

wmic nicconfig get caption,index,TcpipNetbiosOptions

Waxaan rajeyneynaa^(Hopefully) , iyadoo la kaashanayo maqaalkan, waxaad awoodi doontaa inaad damiso Hab-maamuuska NetBIOS iyo LLMR^{(LLMR Protocols)} adoo isticmaalaya GPO .

Akhri Xiga: ^{(Read Next: )}How to enable or disable NetBIOS over TCP/IP on Windows 10

How to disable NetBIOS and LLMNR Protocols via GPO

Some Windows users are skeptical about twо protocols, NetBIOS over TCP/IP and LLMNR. These protocols are responsible for the compatibility of your network with the legacy Windows version. However, these are very vulnerable to MITM attacks. Therefore, to increase the security of their network many Windows users tend to disable NetBIOS and LLMNR Protocols.In this article, we are going to see how to disable NetBIOS and LLMR Protocols using Group Policy Editor.

If you want to disable NetBIOS and LLMR Protocol, it is better to know few things about them.

LLMNR or Link-Local Multicast Name Resolution is a protocol used by IPv6  and IPv4 clients to know the names of neighboring systems without having to use DNS Server. It was introduced in Windows Vista and is used by versions after that. So, if DNS is unavailable this protocol kicks in.

NetBIOS over TCP/IP is a follow-up protocol of LLMNR and it is used to publish in the LAN and look for resources. If you want to know more about this protocol, open Command Prompt as an administrator and type the following command.

nbtstat

This will display protocol statistics and current TCP/IP connection using NetBIOS over TCP/IP.

Disable LLMR using Group Policy Editor

You can disable the LLMR protocol on a computer using Group Policy Editor easily. To do that, launch Run (Win + R), type “gpedit.msc”, and hit Enter (make sure that the GPO is applied to all the workstations in the domain).

Now, navigate to the following locations.

Computer Configuration > Administrative Templates > Network > DNS Client

Double-click on “Turn off smart multi-homed name resolution“, select Enabled, and click Apply > Ok.

Now, ask all the users to wait for the Group Policy to be updated. Or use the following command to force the update.

gpupdate /force

This way you will be able to disable LLMR using GPO.

You can disable LLMR locally on a Windows computer with the help of PowerShell commands. Launch PowerShell as an administrator and execute the following commands:

New-Item "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT" -Name DNSClient  -Force

New-ItemProperty "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" -Name EnableMultiCast -Value 0 -PropertyType

DWORD  -Force

Disable NetBIOS over TCP/IP

If you are a Windows 10 or Server user, use the following steps to disable NetBIOS over TCP/IP on your computer.

1. Launch Control Panel from the Start Menu.
2. Make sure your View by is set to Large icons and click Network and Sharing Center > Change adapter setting
3. Right-click on the connected network and select Properties.
4. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
5. Click Advanced > WINS > Disable NetBIOS over TCP/IP > Ok.

This way, you have disabled the NetBIOS over TCP/IP on your Windows computer

Disable NetBIOS over TCP/IP with GPO

Unfortunately, there is no separate way to disable NetBIOS over TCP/IP with GPO. However, we are going to create a .ps1 file to do the same.

Copy the following code in Notepad and name it “disableNetbios.ps1”.

$regkey = "HKLM:SYSTEM\CurrentControlSet\services\NetBT\Parameters\Interfaces"

Get-ChildItem $regkey |foreach { Set-ItemProperty -Path "$regkey\$($_.pschildname)" -Name NetbiosOptions -Value 2 -Verbose}

Now, open Local Group Policy Editor and go to the following location.

Computer Configuration > Windows Settings > Script (Startup/Shutdown) > Startup

Double-click on Startup, go to PowerShell Scripts, and change “For this GPO, run scripts in the following order” to Run Windows PowerShell script first.

Click Add > Browser and select the “disableNetbios.ps1” file from its location. Finally, click Apply > Ok to run the script.

To force changes either restart your computer or restart your Network Adapter. If you want to see the changes, use the following command to check if NetBIOS over TCP/IP is disabled for Network Adapters.

wmic nicconfig get caption,index,TcpipNetbiosOptions

Hopefully, with the help of this article, you will be able to disable NetBIOS and LLMR Protocols via GPO.

Read Next: How to enable or disable NetBIOS over TCP/IP on Windows 10

Related posts

• Sida loo awood ama u joojiyo NetBIOS TCP/IP gudaha Windows 11/10

• Sida loo isticmaalo Network Sniffer Tool PktMon.exe gudaha Windows 10

• Daar xiriirinta Shabakadda intaad ku jirto heeganka casriga ah Windows 11/10

• Waa maxay Tor Network maxaase loo isticmaalaa?

• Ku cabbir xawaaraha Shabakadda Aagga Maxaliga ah qalabka Tijaabada Xawaaraha LAN

• Sida loo wadaago faylasha u dhexeeya kombiyuutarada isticmaalaya LAN gudaha Windows 11/10

• Sida loo hagaajiyo Shabakadda aan la aqoonsan ee gudaha Windows 11/10

• Ka jooji Kombuyuutarrada Macmiilka inay meel fog ka waydiiyaan Host Computer Index

• Galka shabakadda ee la cayimay ayaa hadda la sawiray iyadoo la isticmaalayo magac isticmaale oo kala duwan

• Abka ayaa barafoobaya marka ay isku dayayaan inay galaan saamiyada shabakada

• Sida loo sameeyo isku xirka internetka Windows 11/10

• Gudbinta Ping ayaa ku guuldareysatay Khaladka guud ee fashilka gudaha Windows 11/10

• Helitaanka shabakadu waa dansan yahay oo ma daar Windows 11/10

• Ku hagaaji Spikes Ping gudaha WiFi ama Ethernet gudaha Windows 11/10

• Ku samee Hantidhawrka Shabakadda leh Alloy Discovery Express ee Windows 11/10

• Waa maxay sababta wakhtiga Pingygu aad ugu sarreeyo gudaha Windows 11/10?

• Qalabka NetCrunch: Qalabka Xallinta Shabakadda Bilaashka ah

• Aaladaha Shabakadda Wireless-ka ee bilaashka ah ee loogu talagalay Windows 10

• Aan awoodin in uu khariidad ka sameeyo wadayaasha shabakada gudaha Windows 11/10

• Hagaaji khaladka daabacaha shabakada 0x00000bcb - Lama xidhi karo daabacaha