Reading Time: < 1 minute

LLMLR : Disable

WPAD can be changed in Group Policy via the Services setting under ComputerConfiguration > Policies > Windows Settings > Security Settings > System Services and by disabling the WinHTTP WebProxy Auto-Discover Service.

GPO : Configuration ordinateur -> Modèles d’administration -> Réseau -> Client DNS -> Désactiver la résolution de noms multidiffusion.

or by Registry it’s also possible :

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient]
“EnableMulticast”=dword:00000000

CLI : reg add “HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient” /t REG_DWORD /v EnableMulticast /d 0 /f

(to check : reg query “HKLM\Software\Policies\Microsoft\Windows NT\DNSClient” /v EnableMulticast )

See also article on disabling NBT-NS.

https://www.4armed.com/blog/llmnr-nbtns-poisoning-using-responder/

0