en-US

Block NetBIOS-based discovery for domain controller location

Supported on: At least Microsoft Windows 10 or later

Registry

HKLM Software\Policies\Microsoft\Netlogon\Parameters

Value name: BlockNetbiosDiscovery

Enabled: BlockNetbiosDiscovery = 1

Disabled: BlockNetbiosDiscovery = 0

Description

This policy setting allows you to control whether domain controller (DC) location algorithm uses NetBIOS_based discovery for domain controller location. If you enable or do not configure this policy setting, the DC location algorithm will never use NetBIOS-based discovery. This is the default behavior. If you disable this policy setting, the DC location algorithm may use NetBIOS-based discovery when necessary. The final behavior is further governed by the AvoidFallbackNetbiosDiscovery setting. NetBIOS-based discovery is considered unsecure, has many limitations, and will be deprecated in a future release. For these reasons, NetBIOS-based discovery is not recommended. See https://aka.ms/dclocatornetbiosdeprecation for more information.