Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" to organizational standards.

Back

CONTROL ID
07801

CONTROL TYPE
Configuration

CLASSIFICATION
Preventive

SUPPORTING AND SUPPORTED CONTROLS

This Control directly supports the implied Control(s):

Configure network protection settings to organizational standards., CC ID: 07601

There are no implementation support Controls.

SELECTED AUTHORITY DOCUMENTS COMPLIED WITH

Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (EB2729BD-189E-4E49-8F12-F72CD675FF82, Win7SP1 Computer Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (2C26183E-A136-4F39-B229-5A2F868104AB, Win7SP1 Computer Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (556FF6A4-3892-4A86-82D5-FCAB475111FF, Win8 Computer Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (4B664512-1258-468B-9A7D-E12275697529, Win8 Computer Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (4145C4DC-EB0F-49B2-A9F0-0D6465F7542E, WinVistaSP2 Computer Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (4B8FBCC3-1CA1-4D37-BCC4-054F8F1B0585, WinVistaSP2 Computer Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (493F3320-8EE1-4534-AD77-2385468E36FB, WinXPSP3 Computer Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (D324B862-E9C4-44B8-9A75-D12930F6D4D0, WinXPSP3 Computer Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Enabled". (99E64759-C236-44C1-ABDC-9D12B46375B5, WS2003SP2 Domain Controller Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Enabled". (E6B001BC-E800-495B-8F90-F7D04B74DF5A, WS2003SP2 Domain Controller Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Enabled". (F333D77B-5CD8-4768-8097-1421DBDCD8FB, WS2003SP2 Member Server Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Enabled". (E82EB0C6-14D1-4442-918D-5BEB9EBB2613, WS2003SP2 Member Server Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (79ADA86A-24E6-4CBA-8E8A-F19619EC87E7, WS2008R2SP1 Domain Controller Security Compliance, 1.1)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (CF15DF22-034A-4010-8FE4-84B4C6A86A44, WS2008R2SP1 Domain Controller Security Compliance, 1.1)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (FF734059-F514-4014-81F1-99B80A652C6E, WS2008R2SP1 Member Server Security Compliance, 1.1)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (1AD94F1B-9D10-4914-921D-7D8F5EB25EF9, WS2008R2SP1 Member Server Security Compliance, 1.1)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Enabled". (7F5EE6D7-3ECA-478F-8E9D-99D422FA13D0, WS2008SP2 Domain Controller Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Enabled". (32A334FD-DF89-43CE-A42C-FEE0606C00C3, WS2008SP2 Domain Controller Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Enabled". (8EC2C0D7-11A8-4A16-B88B-8AD224FAC81A, WS2008SP2 Member Server Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Enabled". (AC127418-4FCA-4DF6-B174-5503518B7D08, WS2008SP2 Member Server Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (FD0384CE-DACC-41B3-BE9D-66DF0902E3BD, WS2012 Domain Controller Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (6A5E782E-0B43-4AC4-85C3-6C5CE72A67D4, WS2012 Domain Controller Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (804476AE-3ED5-4F1B-8CB3-29D33E2BC239, WS2012 Member Server Security Compliance, 1.0)
Configure the "MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers" setting to "Not Defined". (2906FE0C-891F-42B8-AFDA-FB96F697EFF2, WS2012 Member Server Security Compliance, 1.0)
(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled' Description: NetBIOS over TCP/IP is a network protocol that among other things provides a way to easily resolve NetBIOS names that are registered on Wind… (18.4.6, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 1)
(L1) Ensure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' is set to 'Enabled' Description: NetBIOS over TCP/IP is a network protocol that among other things provides a way to easily resolve NetBIOS names that are registered on Wind… (18.4.6, CIS Microsoft Windows Server 2019 Benchmark, v1.2.1, Level 2)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\ Par… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.1.1.6_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.1.1.6.1_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\ Par… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.1.1.6_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.1.1.6.2_, The Center for Internet Security Microsoft Windows 7 Level 1 + BitLocker Benchmark, 2.1.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\ Par… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.1.1.6_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.1.1.6.1_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\ Par… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.2.1.1.1.6_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.2.1.1.1.6.2_, The Center for Internet Security Microsoft Windows 7 Level 1 Benchmark, 2.1.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Para… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.9.12_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.9.12.1_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Para… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.9.12_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.9.12.2_, The Center for Internet Security Microsoft Windows 8 Level 1 + BitLocker Benchmark, 1.0.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Para… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.9.12_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.9.12.1_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Para… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.9.12_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.9.12.2_, The Center for Internet Security Microsoft Windows 8 Level 1 Benchmark, 1.0.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\ Par… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.2.1.20_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.2.1.20.1_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\ Par… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.1.2.1.20_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.1.2.1.20.2_, The Center for Internet Security Microsoft Windows Server 2008 R2 Level 1 Domain Controller Benchmark, 2.1.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Para… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.10.7_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.10.7.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Para… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.10.7_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.10.7.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Domain Controller Benchmark, 1.0.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Para… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.10.7_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.10.7.2_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
Title: Configure 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' Description: The registry value entry NoNameReleaseOnDemand was added to the template file in the HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Netbt\Para… (Rule: xccdf_org.cisecurity.benchmarks_rule_1.1.3.10.7_Configure_MSS_NoNameReleaseOnDemand_Allow_the_computer_to_ignore_NetBIOS_name_release_requests_except_from_WINS_servers Artifact Expression: xccdf_org.cisecurity.benchmarks_ae_1.1.3.10.7.1_, The Center for Internet Security Microsoft Windows Server 2012 Level 1 Member Server Benchmark, 1.0.0)
The 'MSS: (NoNameReleaseOnDemand) Allow the computer to ignore NetBIOS name release requests except from WINS servers' setting should be configured correctly. Technical Mechanisms: (1) GPO: Computer Configuration\Windows Settings\Security Settings\Local Policies\Security Options\MSS: (NoNameRelease… (CCE-10653-4, Common Configuration Enumeration List, Combined XML: Microsoft Windows Server 2008 R2, 5.20130214)
TCP/IP NetBIOS Name Release on Request Prevented should be properly configured. Technical Mechanisms: (1) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters\NoNameReleaseOnDemand Parameters: (1) enabled/disabled References: CCE-817 Protect Against Malicious Name-Release Attacks… (CCE-3922-2, Common Configuration Enumeration List, Combined XML: Windows 2000, 5.20130214)
TCP/IP NetBIOS Name Release on Request Prevented should be properly configured. Technical Mechanisms: (1) HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Netbt\Parameters\NoNameReleaseOnDemand Parameters: (1) enabled/disabled References: CCE-817 Table 3.248 Configure NetBIOS Name Release Sec… (CCE-2817-5, Common Configuration Enumeration List, Combined XML: Windows Server 2003, 5.20130214)