Disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter?

[jsykora]

It is our corporate policy standard to disable NetBIOS over TCP/IP for the IPv4 component of all network adapters on corporate devices as a preventative security measure.  This is achievable via powershell scripting on all Windows devices.  However, we run into issues with the PANGP Virtual Ethernet Adapters being created by the GP 5.1.x software with default Windows settings, which have NetBIOS over TCP/IP enabled.  Even if we disable this, it will be enabled on next device restart.

Is there an option in the GP Portal or a registry key to manage this setting so that it doesn't default on when the PANGP VEA is created or refreshed?

The only way I've been able to think of to handle this is to run our powershell script that disables this function as a post-connect script, but I don't believe the GP Agent would have the appropriate access permissions to make the change.

[mcepiel]

Hi Jsykora,

Answering your question, there is no possibility to disable the NETBIOS service from the GP configuration.

However, you can disable NetBIOS over TCP/IP on PANGP Virtual Ethernet Adapter on the client machine.
network setting ----->Select TCP/IP v4 ------>advanced---->WINS----->Disable NetBIOS option.

You can disable NetBIOS for the specific network adapter in the registry as well. Each network adapter has a separate branch in HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetBT\Parameters\Interfaces containing its TCPIP-GUID.
https://www.reddit.com/r/networking/comments/8wkye8/anyconnect_clients_spamming_netbios/