User Tools

Site Tools


windows:netbios

Differences

This shows you the differences between two versions of the page.

Link to this comparison view

Next revision
Previous revision
windows:netbios [2021/09/10 13:39] – created bstaffordwindows:netbios [2025/01/07 19:13] (current) – [nbtsta t] bstafford
Line 12: Line 12:
   * nbtstat -s: lists the current NetBIOS sessions and their status, including statistics.   * nbtstat -s: lists the current NetBIOS sessions and their status, including statistics.
   * nbtstat -S: lists sessions table with the destination IP addresses.   * nbtstat -S: lists sessions table with the destination IP addresses.
 +
 +Be aware that when you run NetBIOS without specifying a username, it will use the "guest" account (so that is what you will see on the Microsoft logs)
 +===== Disable NetBIOS =====
 +
 +As per [[https://10dsecurity.com/blog-saying-goodbye-netbios.html|this page]].
 +
 +Disabling the NetBIOS support from a (Windows) DHCP server can be accomplished by the following steps:
 +
 +  - Open Administrative Tools, click DHCP
 +  - Expand the DHCP server name, expand scope, right-click scope options, then click Configure Options.
 +  - Click the advanced tab, then ''Microsoft Windows 2000 Options'' in the Vendor Class list.
 +  - Make sure ''Default User Class'' is selected in the User Class list.
 +  - Select the checkbox for ''001 Microsoft Disable NetBIOS Option'' under Available Options.
 +  - In the Data Entry area, type '0x2' in the Long box, then click OK.
 +
 +Disabling the NetBIOS support on a client computer can be accomplished by the following steps
 +
 +Manually via Network Adapter settings:
 +  - Open Network Connection Properties.
 +  - Select TCP/IP v4.
 +  - Click Advanced, then select the WINS tab.
 +  - Select ''Disable NetBIOS over TCP/IP''.
 +  - Click OK and reboot the computer.
 +
 +Via registry settings
 +
 +It is worth noting that these settings are for each network adapter; scripts are available to configure these settings for all adapters in a computer. Evaluate the use of a script in your environment, and consider the implications if deployed in masse.
 +
 +  - Open registry editor.
 +  - Edit the data for ''NetbiosOptions'' and set the parameter to 2 (it will be 0 by default).
 +  - Perform the above steps for each adapter in the computer.
 +  - Close the registry editor and reboot the computer.
 +
windows/netbios.1631281147.txt.gz · Last modified: (external edit)