Site icon WinCert

How to disable NetBIOS via GPO

<p>A couple of months ago we have posted an article with instructions on <a href&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;windows-server&sol;how-to-disable-netbios-for-dhcp-clients&sol;" target&equals;"&lowbar;blank" rel&equals;"noopener noreferrer">how to disable NetBIOS for DHCP clients<&sol;a>&period; In this article&comma; we will describe how to disable NetBIOS via GPO for servers and workstations&period;<&sol;p>&NewLine;<p>So&comma; in case you&&num;8217&semi;re still using fixed IP addresses and you need to disable NetBIOS for clients in a domain environment this guide will help&period;<&sol;p>&NewLine;<p>Since there is no GPO setting that will allow you to disable NetBIOS for clients older than Win10 and Windows Server 2016 we will use a Startup Scrip with a registry setting parameters&period;<&sol;p>&NewLine;<p>Open <strong>Group Policy Management<&sol;strong> editor and under <strong>Group Policy objects<&sol;strong> create a <strong>new GPO<&sol;strong>&period;<&sol;p>&NewLine;<p>From the left pane navigate to<strong> Computer Configuration &vert; Policies &vert; Windows Settings &vert; Scripts &lpar;Startup&sol;Shutdown&rpar;<&sol;strong><&sol;p>&NewLine;<p>In the right pane <strong>double click on the Startup<&sol;strong> link&period;<&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-4008" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2020&sol;11&sol;how-to-disable-netbios-via-gpo-1&period;png" alt&equals;"" width&equals;"592" height&equals;"432" &sol;><&sol;p>&NewLine;<p>In <strong>Startup Properties &vert; Scripts<&sol;strong> window prompt click <strong>Add<&sol;strong>&period; In the <strong>Add script<&sol;strong> prompt click <strong>Browse<&sol;strong>&period;<&sol;p>&NewLine;<p>Create a new file with the <strong>&period;bat<&sol;strong> extension&period; For instance <strong>disable&lowbar;netbios&period;bat<&sol;strong>&period;<&sol;p>&NewLine;<p><strong>Right-click<&sol;strong> on the <strong>disable&lowbar;netbios&period;bat<&sol;strong> file and select <strong>Edit<&sol;strong>&period;<&sol;p>&NewLine;<p>Copy-paste the following command and save the file&period;<&sol;p>&NewLine;<p><strong>wmic nicconfig where &lpar;TcpipNetbiosOptions&excl;&equals;Null and TcpipNetbiosOptions&excl;&equals;2&rpar; call SetTcpipNetbios 2<&sol;strong><&sol;p>&NewLine;<p>Click <strong>OK<&sol;strong> a couple of times to close the GPO editor&period;<&sol;p>&NewLine;<p>Since this is a <strong>Computer Configuration policy<&sol;strong> you may want to disable <strong>User Configuration<&sol;strong> in order to speed up GPO processing for your environment&period;<&sol;p>&NewLine;<p>To do this&comma; from the left pane of the Group Policy Management editor click on the policy that you&&num;8217&semi;ve just created&period; In the right pane select the <strong>Details tab<&sol;strong> and from the GPO Status drop-down list select <strong>User configuration settings disabled<&sol;strong>&period;<&sol;p>&NewLine;<p><img class&equals;"alignnone size-full wp-image-4009" src&equals;"https&colon;&sol;&sol;www&period;wincert&period;net&sol;wp-content&sol;uploads&sol;2020&sol;11&sol;how-to-disable-netbios-via-gpo-3&period;png" alt&equals;"" width&equals;"418" height&equals;"334" &sol;><&sol;p>&NewLine;<p>Also&comma; as this is a computer configuration policy a computer restart will be required to apply this policy&period;<&sol;p>&NewLine;<p>It is advisable to link this policy on a <strong>test Active Directory container<&sol;strong> to check if everything is working as it should before you decide to apply it for all domain computer objects&period;<&sol;p>&NewLine;<p>Comments are welcome&excl;<&sol;p>&NewLine;

Exit mobile version