Vulnerabilities in security configuration on your Windows machines should be remediated - Turn off multicast name resolution

Ben Jackson 31 Reputation points
2022-10-03T09:46:51.85+00:00

Could someone advise if I have missed something please, I'm trying to address the Defender for Cloud security check finding "Turn off multicast name resolution" and have as far as I know dealt with this correctly, yet the finding remains.

I have set the registry per AZ-WIN-00145 Key Path: SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast to 0 and disabled NetBIOS over TCP-IP on the NIC

What am I missing?

Appreciate any suggestions

Microsoft Defender for Cloud
Microsoft Defender for Cloud
An Azure service that provides threat protection for workloads running in Azure, on-premises, and in other clouds. Previously known as Azure Security Center and Azure Defender.
1,194 questions

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Limitless Technology 39,356 Reputation points
    2022-10-04T08:19:08.843+00:00

    Hi,

    In order to turn off multicast name resolution, you need to set the DWORD at the registry key listed above to 1.

    I hope this answers your question.

    -----------------------------------------------------------------------------------------------------------------------------------------------

    --If the reply is helpful, please Upvote and Accept as answer--

  2. JamesTran-MSFT 36,371 Reputation points Microsoft Employee
    2022-10-04T22:10:03.073+00:00

    @Ben Jackson
    Thank you for following up on this!

    From your Microsoft Defender for Cloud Recommendation, I found a related support case and based off the Windows Security Baseline Administrative Templates - Network documentation, it looks like you'll have to Enable the Turn off multicast name resolution feature.
    247480-image.png
    247549-image.png

    If you're still having issues with the recommendation after Enabling the Turn off multicast name resolution feature, can you share what the remediation steps are? Along with a screenshot of what you're seeing within the Portal?
    247467-image.png 247582-image.png

    I hope this helps!

    If you'd like our support team to take a closer look into your environment and issue through a free technical support request, please let me know.
    Thank you for your time and patience throughout this issue.

    ----------

    Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.