Forum Discussion

paddypowers's avatar
paddypowers
Copper Contributor
Jul 28, 2025

Low success rate of active name resolution NetBIOS (failed rates 80%) andRdpTls (failed rate 90%).

Low success rate of active name resolution
Three  Domain controllers are failing name resolution using NetBIOS (failed rates 80%), NetworkNameResolverMethod RdpTls (failed rate 90%) however 
RPC over NTLM and reverse DNS working confirmed by Microsoft support.The three domain controllers are runing windows server 2016 with the installed  Azure ATP Sensor on the DCs is  version is 2.243 I need assistance how to get this issue resoves on the failing three dc please.

2 Replies

  • First of all, once you have NTLMRpc and DNS working, at least from detection aspect you should be fine.
    Now, to clear warnings, you can ask support for a report on which IPs are failing from those sensors, this will give you a clue as to what is blocked, but there is no way for Microsoft to remotely know what is blocking the coms, it could be a network firewall  or the target machien FW  itself...

    • paddypowers's avatar
      paddypowers
      Copper Contributor

      Thanks  for your replied back i will ask support for a report on which IPs are failing from the DCs sensors. Thanks for your advices.

Resources