一些Windows用户^(Windows)NetBIOS over TCP/IP和LLMNR这两种协议持怀疑态度。这些协议负责您的网络与旧Windows版本的兼容性。但是，这些非常容易受到MITM 攻击^{(MITM attacks)}。因此，为了提高网络的安全性，许多Windows用户倾向于禁用NetBIOS和LLMNR 协议^{(LLMNR Protocols.In)}。在本文中，我们将了解如何使用组策略编辑器禁用^{(Group Policy Editor)}NetBIOS和LLMR 协议^{(LLMR Protocols)}。

如果您想禁用NetBIOS和LLMR 协议^{(LLMR Protocol)}，最好了解一些关于它们的信息。

LLMNR 或 Link-Local Multicast Name Resolution是IPv6  和IPv4客户端使用的协议，无需使用DNS 服务器^{(DNS Server)}即可知道相邻系统的名称。它是在Windows Vista中引入的，并被之后的版本使用。因此，如果DNS不可用，此协议就会启动。

NetBIOS over TCP/IP LLMNR 的后续协议，用于在局域网^(LAN)中发布和寻找资源。如果您想了解有关此协议的更多信息，请 以管理员身份打开命令提示符 并键入以下命令。^{(Command Prompt )}

nbtstat

TCP/IP /IP上的NetBIOS显示协议统计信息和当前TCP/IP连接。

使用组策略编辑器^{(Group Policy Editor)}禁用LLMR

您可以使用组策略编辑器^{(Group Policy Editor)}轻松禁用计算机上的LLMR协议。为此，启动运行 ^(Run )(Win + R)，输入“ gpedit.msc”，然后 按 Enter ^(Enter )（确保GPO应用于域中的所有工作站）。

现在，导航到以下位置。

Computer Configuration > Administrative Templates > Network > DNS Client

双击“关闭智能多宿主名称解析^{(Turn off smart multi-homed name resolution)}”，选择 启用， ^(Enabled, )然后单击 Apply > Ok.

现在，要求所有用户等待组策略^{(Group Policy)}更新。或者使用以下命令强制更新。

gpupdate /force

这样您就可以使用GPO禁用^(GPO)LLMR。

您可以借助PowerShell^(PowerShell)命令在Windows计算机上本地禁用LLMR 。以管理员身份启动 PowerShell并执行以下命令：^{(Launch PowerShell)}

New-Item "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT" -Name DNSClient  -Force

New-ItemProperty "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" -Name EnableMultiCast -Value 0 -PropertyType

DWORD  -Force

禁用 TCP/IP 上的 NetBIOS

如果您是Windows 10或Server用户，请使用以下步骤在您的计算机上disable NetBIOS over TCP/IP

1. 从 开始菜单^{(Start Menu.)}启动 控制面板 。^{(Control Panel )}
2. 确保您的 查看方式 ^{(View by )}设置为 大图标 ^{(Large icons )}，然后单击 Network and Sharing Center > Change adapter setting
3. 右键单击^{(Right-click)}连接的网络并选择 属性。^{(Properties.)}
4. 选择 Internet Protocol Version 4 (TCP/IPv4) ，然后单击 属性。^{(Properties.)}
5. 单击 Advanced > WINS > Disable NetBIOS over TCP/IP > Ok.

这样，您已在 Windows 计算机上禁用了TCP/IPNetBIOS

使用GPO禁用TCP TCP/IPNetBIOS

不幸的是，没有单独的方法可以通过GPO禁用TCP TCP/IPNetBIOS。但是，我们将创建一个 .ps1 文件来做同样的事情。

在记事本 ^(Notepad )中复制以下代码 并将其命名为“disableNetbios.ps1”。

$regkey = "HKLM:SYSTEM\CurrentControlSet\services\NetBT\Parameters\Interfaces"

Get-ChildItem $regkey |foreach { Set-ItemProperty -Path "$regkey\$($_.pschildname)" -Name NetbiosOptions -Value 2 -Verbose}

现在，打开 本地组策略编辑器 ^{(Local Group Policy Editor )}并转到以下位置。

Computer Configuration > Windows Settings > Script (Startup/Shutdown) > Startup

双击 启动，^{(Startup, )}转到PowerShell 脚本，^{(PowerShell Scripts, )}然后将“对于此 GPO，按以下顺序运行脚本” ^{(For this GPO, run scripts in the following order” )}更改为 首先运行 Windows PowerShell 脚本。^{(Run Windows PowerShell script first.)}

单击 Add > Browser 并从其位置选择“disableNetbios.ps1”文件^{(“disableNetbios.ps1” )}。最后，单击 Apply > Ok 运行脚本。

要强制更改，请重新启动计算机或重新启动网络适配器^{(Network Adapter)}。如果要查看更改，请使用以下命令检查是否为Network Adapters禁用了TCP/IPNetBIOS。

wmic nicconfig get caption,index,TcpipNetbiosOptions

希望^(Hopefully)在本文的帮助下，您将能够通过GPO禁用^(GPO)NetBIOS和LLMR 协议^{(LLMR Protocols)}。

阅读下一篇：^{(Read Next: )}How to enable or disable NetBIOS over TCP/IP on Windows 10

How to disable NetBIOS and LLMNR Protocols via GPO

Some Windows users are skeptical about two protocоls, NetBIOS over TCP/IP and LLMNR. These protocols are responsible for the compatibility of your network with the legacy Windows version. However, these are very vulnerable to MITM attacks. Therefore, to increase the security of their network many Windows users tend to disable NetBIOS and LLMNR Protocols.In this article, we are going to see how to disable NetBIOS and LLMR Protocols using Group Policy Editor.

If you want to disable NetBIOS and LLMR Protocol, it is better to know few things about them.

LLMNR or Link-Local Multicast Name Resolution is a protocol used by IPv6  and IPv4 clients to know the names of neighboring systems without having to use DNS Server. It was introduced in Windows Vista and is used by versions after that. So, if DNS is unavailable this protocol kicks in.

NetBIOS over TCP/IP is a follow-up protocol of LLMNR and it is used to publish in the LAN and look for resources. If you want to know more about this protocol, open Command Prompt as an administrator and type the following command.

nbtstat

This will display protocol statistics and current TCP/IP connection using NetBIOS over TCP/IP.

Disable LLMR using Group Policy Editor

You can disable the LLMR protocol on a computer using Group Policy Editor easily. To do that, launch Run (Win + R), type “gpedit.msc”, and hit Enter (make sure that the GPO is applied to all the workstations in the domain).

Now, navigate to the following locations.

Computer Configuration > Administrative Templates > Network > DNS Client

Double-click on “Turn off smart multi-homed name resolution“, select Enabled, and click Apply > Ok.

Now, ask all the users to wait for the Group Policy to be updated. Or use the following command to force the update.

gpupdate /force

This way you will be able to disable LLMR using GPO.

You can disable LLMR locally on a Windows computer with the help of PowerShell commands. Launch PowerShell as an administrator and execute the following commands:

New-Item "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT" -Name DNSClient  -Force

New-ItemProperty "HKLM:\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient" -Name EnableMultiCast -Value 0 -PropertyType

DWORD  -Force

Disable NetBIOS over TCP/IP

If you are a Windows 10 or Server user, use the following steps to disable NetBIOS over TCP/IP on your computer.

1. Launch Control Panel from the Start Menu.
2. Make sure your View by is set to Large icons and click Network and Sharing Center > Change adapter setting
3. Right-click on the connected network and select Properties.
4. Select Internet Protocol Version 4 (TCP/IPv4) and click Properties.
5. Click Advanced > WINS > Disable NetBIOS over TCP/IP > Ok.

This way, you have disabled the NetBIOS over TCP/IP on your Windows computer

Disable NetBIOS over TCP/IP with GPO

Unfortunately, there is no separate way to disable NetBIOS over TCP/IP with GPO. However, we are going to create a .ps1 file to do the same.

Copy the following code in Notepad and name it “disableNetbios.ps1”.

$regkey = "HKLM:SYSTEM\CurrentControlSet\services\NetBT\Parameters\Interfaces"

Get-ChildItem $regkey |foreach { Set-ItemProperty -Path "$regkey\$($_.pschildname)" -Name NetbiosOptions -Value 2 -Verbose}

Now, open Local Group Policy Editor and go to the following location.

Computer Configuration > Windows Settings > Script (Startup/Shutdown) > Startup

Double-click on Startup, go to PowerShell Scripts, and change “For this GPO, run scripts in the following order” to Run Windows PowerShell script first.

Click Add > Browser and select the “disableNetbios.ps1” file from its location. Finally, click Apply > Ok to run the script.

To force changes either restart your computer or restart your Network Adapter. If you want to see the changes, use the following command to check if NetBIOS over TCP/IP is disabled for Network Adapters.

wmic nicconfig get caption,index,TcpipNetbiosOptions

Hopefully, with the help of this article, you will be able to disable NetBIOS and LLMR Protocols via GPO.

Read Next: How to enable or disable NetBIOS over TCP/IP on Windows 10

Related posts

• 如何在Windows 10上通过TCP/IP启用或禁用NetBIOS

• 如何在Windows 10使用Network Sniffer Tool PktMon.exe

• 启用Network Connections而在Modern Standby上Windows 10

• 什么是Tor Network，它用于什么？

• 用LAN Speed Test tool测量Local Area Network speed

• Glasswire 防火墙和网络监控工具评论

• 为什么我的ping Time在Windows 11/10中如此之高？

• 如何在Windows 10中创建Network股票

• 如何在Windows 10中清除Mapped Network Drive Cache

• Apps试图access network股时冻结

• Best免费Network Diagram software用于设计您的网络

• 指定的Network folder当前使用不同的用户名映射

• 如何在Windows 10上使用Group Policy映射Network Drive

• Windows无法自动检测此网络的代理设置

• 如何在Windows 10中使用LAN共享计算机之间的文件

• 如何建立一个Internet connection在Windows 11/10

• Device Manager未发现Realtek Network Controller

• 如何在Windows 10查看Wi-Fi Network Driver information

• Release TCP/IP，Flush DNS，Reset Winsock，Reset Proxy带Batch File

• 如何在Windows 10使用Port Query Tool（PortQry.exe）