Forum Discussion
disable Multicast Name Resolution (LLMNR) with Intune
- Feb 22, 2020
Basher81 I haven't recieved an answer. The best way to do this is creating a powershell script to add the following registry setting:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient]
"EnableMulticast"=dword:00000000You can deploy this by either packaging with the win32 prep tool (application) or deploy it as a powershell script.
Hope this will help you.
AadLutgert Hi, As there are a GPO "Turn Off Multicast Name Resolution" you could use an ADMX backed policy and importing the admx file and then deploy it as a configuration Policy.
That is what I would have tried.
Regards,
Jörgen
Thanks for your suggestion. I've thought about this option, but ingestion is not allowed for the key location used by this setting. The location used is:
software\policies\microsoft\windows NT\DNS client
And it's not possible to ingest policies for the following key locations:
System
Software\Windows
Software\Policies\Microsoft
And there isn't an exception for the key "windows nt" in the exception list.
Please let me know if this isn't correct.
- Basher81Feb 20, 2020Copper Contributor
AadLutgert DId you ever figure this out? I am running into the same thing now
- AadLutgertFeb 22, 2020Brass Contributor
Basher81 I haven't recieved an answer. The best way to do this is creating a powershell script to add the following registry setting:
[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient]
"EnableMulticast"=dword:00000000You can deploy this by either packaging with the win32 prep tool (application) or deploy it as a powershell script.
Hope this will help you.
- Martijn SteffensAug 07, 2020Iron Contributor
AadLutgert 🤞 maby you can help us out. So i was able to create the reg key EnableMulticast, but when looking at the Gpedit.msc, i still see the Multicast setting ' not configured'.
Maby is the heat 😅 or i'm missing something. Goal in the end, would be to disable LLMNR and Netbios using Intune.
Kind regards, Martijn