Just exactly when can I remove Netbios from my network?

I'm trying to figure out just when I can get Netbios / WINs out of my
network. I'm all Windows XP Pro and alot of what I read says it's ok.
However, I hear tidbits that maybe Exchange or SMS still needs it.

Looking for some links to info on just what the real deal is on this....


--
Sandy Wood
Orange County District Attorney

"Sandy Wood" <(E-Mail Removed)> wrote in message
news6992B8B-DE83-478D-A94B-(E-Mail Removed)...
> I'm trying to figure out just when I can get Netbios / WINs out of my
> network.

Possibly never,...at least in the practical near future sense.

> I'm all Windows XP Pro and alot of what I read says it's ok.
> However, I hear tidbits that maybe Exchange or SMS still needs it.

There is more to it than MS Products. There is a whole "world full" of
products out there to worry about. Symantec Antivirus Corperate Edition,
for example, needs netbios naming so the SAV Server interact with the SAV
Clients.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------

Wow-you know I never thought about that. I suppose I need to look at my other
apps besides Microsoft! Yikes! Thanks.
--
Sandy Wood
Orange County District Attorney


"Phillip Windell" wrote:

> "Sandy Wood" <(E-Mail Removed)> wrote in message
> news6992B8B-DE83-478D-A94B-(E-Mail Removed)...
> > I'm trying to figure out just when I can get Netbios / WINs out of my
> > network.
>
> Possibly never,...at least in the practical near future sense.
>
> > I'm all Windows XP Pro and alot of what I read says it's ok.
> > However, I hear tidbits that maybe Exchange or SMS still needs it.
>
> There is more to it than MS Products. There is a whole "world full" of
> products out there to worry about. Symantec Antivirus Corperate Edition,
> for example, needs netbios naming so the SAV Server interact with the SAV
> Clients.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
> -----------------------------------------------------
> Understanding the ISA 2004 Access Rule Processing
> http://www.isaserver.org/articles/IS...cessRules.html
>
> Microsoft Internet Security & Acceleration Server: Guidance
> http://www.microsoft.com/isaserver/t...dance/2004.asp
> http://www.microsoft.com/isaserver/t...dance/2000.asp
>
> Microsoft Internet Security & Acceleration Server: Partners
> http://www.microsoft.com/isaserver/partners/default.asp
>
> Deployment Guidelines for ISA Server 2004 Enterprise Edition
> http://www.microsoft.com/technet/pro...isaserver.mspx
> -----------------------------------------------------
>
>
>
>

Just keep Netbios/WINS.
The performance hit is pretty much non-existant. As long as you are
properly firewalled off from the internet and use RFC Private IP#s behind
the firewall device I don't see any security issues that are worth
mentioning either.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com

"Sandy Wood" <(E-Mail Removed)> wrote in message
news:E8B5FE1D-E10F-4D92-AF6C-(E-Mail Removed)...
> Wow-you know I never thought about that. I suppose I need to look at my
other
> apps besides Microsoft! Yikes! Thanks.
> --
> Sandy Wood
> Orange County District Attorney
>
>
> "Phillip Windell" wrote:
>
> > "Sandy Wood" <(E-Mail Removed)> wrote in message
> > news6992B8B-DE83-478D-A94B-(E-Mail Removed)...
> > > I'm trying to figure out just when I can get Netbios / WINs out of my
> > > network.
> >
> > Possibly never,...at least in the practical near future sense.
> >
> > > I'm all Windows XP Pro and alot of what I read says it's ok.
> > > However, I hear tidbits that maybe Exchange or SMS still needs it.
> >
> > There is more to it than MS Products. There is a whole "world full" of
> > products out there to worry about. Symantec Antivirus Corperate
Edition,
> > for example, needs netbios naming so the SAV Server interact with the
SAV
> > Clients.
> >
> > --
> > Phillip Windell [MCP, MVP, CCNA]
> > www.wandtv.com
> > -----------------------------------------------------
> > Understanding the ISA 2004 Access Rule Processing
> > http://www.isaserver.org/articles/IS...cessRules.html
> >
> > Microsoft Internet Security & Acceleration Server: Guidance
> > http://www.microsoft.com/isaserver/t...dance/2004.asp
> > http://www.microsoft.com/isaserver/t...dance/2000.asp
> >
> > Microsoft Internet Security & Acceleration Server: Partners
> > http://www.microsoft.com/isaserver/partners/default.asp
> >
> > Deployment Guidelines for ISA Server 2004 Enterprise Edition
> >
http://www.microsoft.com/technet/pro...isaserver.mspx
> > -----------------------------------------------------
> >
> >
> >
> >

What we're trying to limit is the broadcasting that NetBios seems to generate.
--
Sandy Wood
Orange County District Attorney


"Phillip Windell" wrote:

> Just keep Netbios/WINS.
> The performance hit is pretty much non-existant. As long as you are
> properly firewalled off from the internet and use RFC Private IP#s behind
> the firewall device I don't see any security issues that are worth
> mentioning either.
>
> --
> Phillip Windell [MCP, MVP, CCNA]
> www.wandtv.com
>
> "Sandy Wood" <(E-Mail Removed)> wrote in message
> news:E8B5FE1D-E10F-4D92-AF6C-(E-Mail Removed)...
> > Wow-you know I never thought about that. I suppose I need to look at my
> other
> > apps besides Microsoft! Yikes! Thanks.
> > --
> > Sandy Wood
> > Orange County District Attorney
> >
> >
> > "Phillip Windell" wrote:
> >
> > > "Sandy Wood" <(E-Mail Removed)> wrote in message
> > > news6992B8B-DE83-478D-A94B-(E-Mail Removed)...
> > > > I'm trying to figure out just when I can get Netbios / WINs out of my
> > > > network.
> > >
> > > Possibly never,...at least in the practical near future sense.
> > >
> > > > I'm all Windows XP Pro and alot of what I read says it's ok.
> > > > However, I hear tidbits that maybe Exchange or SMS still needs it.
> > >
> > > There is more to it than MS Products. There is a whole "world full" of
> > > products out there to worry about. Symantec Antivirus Corperate
> Edition,
> > > for example, needs netbios naming so the SAV Server interact with the
> SAV
> > > Clients.
> > >
> > > --
> > > Phillip Windell [MCP, MVP, CCNA]
> > > www.wandtv.com
> > > -----------------------------------------------------
> > > Understanding the ISA 2004 Access Rule Processing
> > > http://www.isaserver.org/articles/IS...cessRules.html
> > >
> > > Microsoft Internet Security & Acceleration Server: Guidance
> > > http://www.microsoft.com/isaserver/t...dance/2004.asp
> > > http://www.microsoft.com/isaserver/t...dance/2000.asp
> > >
> > > Microsoft Internet Security & Acceleration Server: Partners
> > > http://www.microsoft.com/isaserver/partners/default.asp
> > >
> > > Deployment Guidelines for ISA Server 2004 Enterprise Edition
> > >
> http://www.microsoft.com/technet/pro...isaserver.mspx
> > > -----------------------------------------------------
> > >
> > >
> > >
> > >
>
>
>

As long as you follow the general rule of 250-300 Hosts per network segment
you aren't even going to notice they are there. A typical network segment
using a 24bit mask provides 254 Host which is the perfect size,...if you are
within that, the only way you would ever have a broadcast problem is if you
had some kind of third-part Application that created a ton of broadcasts and
flooded the segment.

Keep in mind that there is a big difference between what seems like a "lot"
to a Human looking at a packet capture and what is interpreted as a "lot" to
a computer.

--
Phillip Windell [MCP, MVP, CCNA]
www.wandtv.com
-----------------------------------------------------
Understanding the ISA 2004 Access Rule Processing
http://www.isaserver.org/articles/IS...cessRules.html

Troubleshooting Client Authentication on Access Rules in ISA Server 2004
http://download.microsoft.com/downlo...7/ts_rules.doc

Microsoft Internet Security & Acceleration Server: Guidance
http://www.microsoft.com/isaserver/t...dance/2004.asp
http://www.microsoft.com/isaserver/t...dance/2000.asp

Microsoft Internet Security & Acceleration Server: Partners
http://www.microsoft.com/isaserver/partners/default.asp

Deployment Guidelines for ISA Server 2004 Enterprise Edition
http://www.microsoft.com/technet/pro...isaserver.mspx
-----------------------------------------------------



"Sandy Wood" <(E-Mail Removed)> wrote in message
news:1A12D17E-F3A1-4C11-8A1C-(E-Mail Removed)...
> What we're trying to limit is the broadcasting that NetBios seems to
generate.
> --
> Sandy Wood
> Orange County District Attorney
>
>
> "Phillip Windell" wrote:
>
> > Just keep Netbios/WINS.
> > The performance hit is pretty much non-existant. As long as you are
> > properly firewalled off from the internet and use RFC Private IP#s
behind
> > the firewall device I don't see any security issues that are worth
> > mentioning either.
> >
> > --
> > Phillip Windell [MCP, MVP, CCNA]
> > www.wandtv.com
> >
> > "Sandy Wood" <(E-Mail Removed)> wrote in message
> > news:E8B5FE1D-E10F-4D92-AF6C-(E-Mail Removed)...
> > > Wow-you know I never thought about that. I suppose I need to look at
my
> > other
> > > apps besides Microsoft! Yikes! Thanks.
> > > --
> > > Sandy Wood
> > > Orange County District Attorney
> > >
> > >
> > > "Phillip Windell" wrote:
> > >
> > > > "Sandy Wood" <(E-Mail Removed)> wrote in message
> > > > news6992B8B-DE83-478D-A94B-(E-Mail Removed)...
> > > > > I'm trying to figure out just when I can get Netbios / WINs out of
my
> > > > > network.
> > > >
> > > > Possibly never,...at least in the practical near future sense.
> > > >
> > > > > I'm all Windows XP Pro and alot of what I read says it's ok.
> > > > > However, I hear tidbits that maybe Exchange or SMS still needs it.
> > > >
> > > > There is more to it than MS Products. There is a whole "world full"
of
> > > > products out there to worry about. Symantec Antivirus Corperate
> > Edition,
> > > > for example, needs netbios naming so the SAV Server interact with
the
> > SAV
> > > > Clients.
> > > >
> > > > --
> > > > Phillip Windell [MCP, MVP, CCNA]
> > > > www.wandtv.com
> > > > -----------------------------------------------------
> > > > Understanding the ISA 2004 Access Rule Processing
> > > > http://www.isaserver.org/articles/IS...cessRules.html
> > > >
> > > > Microsoft Internet Security & Acceleration Server: Guidance
> > > > http://www.microsoft.com/isaserver/t...dance/2004.asp
> > > > http://www.microsoft.com/isaserver/t...dance/2000.asp
> > > >
> > > > Microsoft Internet Security & Acceleration Server: Partners
> > > > http://www.microsoft.com/isaserver/partners/default.asp
> > > >
> > > > Deployment Guidelines for ISA Server 2004 Enterprise Edition
> > > >
> >
http://www.microsoft.com/technet/pro...isaserver.mspx
> > > > -----------------------------------------------------
> > > >
> > > >
> > > >
> > > >
> >
> >
> >

If you have WINS set up and have all machines configured as WINS
clients you eliminate a lot of broadcasts. Name resolution will only fall
back to broadcasting if there is a problem with WINS.

Phillip Windell wrote:
> As long as you follow the general rule of 250-300 Hosts per network
> segment you aren't even going to notice they are there. A typical
> network segment using a 24bit mask provides 254 Host which is the
> perfect size,...if you are within that, the only way you would ever
> have a broadcast problem is if you had some kind of third-part
> Application that created a ton of broadcasts and flooded the segment.
>
> Keep in mind that there is a big difference between what seems like a
> "lot" to a Human looking at a packet capture and what is interpreted
> as a "lot" to a computer.
>
>
> "Sandy Wood" <(E-Mail Removed)> wrote in message
> news:1A12D17E-F3A1-4C11-8A1C-(E-Mail Removed)...
>> What we're trying to limit is the broadcasting that NetBios seems to
>> generate. --
>> Sandy Wood
>> Orange County District Attorney
>>
>>
>> "Phillip Windell" wrote:
>>
>>> Just keep Netbios/WINS.
>>> The performance hit is pretty much non-existant. As long as you are
>>> properly firewalled off from the internet and use RFC Private IP#s
>>> behind the firewall device I don't see any security issues that are
>>> worth mentioning either.
>>>
>>> --
>>> Phillip Windell [MCP, MVP, CCNA]
>>> www.wandtv.com
>>>
>>> "Sandy Wood" <(E-Mail Removed)> wrote in message
>>> news:E8B5FE1D-E10F-4D92-AF6C-(E-Mail Removed)...
>>>> Wow-you know I never thought about that. I suppose I need to look
>>>> at my other apps besides Microsoft! Yikes! Thanks.
>>>> --
>>>> Sandy Wood
>>>> Orange County District Attorney
>>>>
>>>>
>>>> "Phillip Windell" wrote:
>>>>
>>>>> "Sandy Wood" <(E-Mail Removed)> wrote in message
>>>>> news6992B8B-DE83-478D-A94B-(E-Mail Removed)...
>>>>>> I'm trying to figure out just when I can get Netbios / WINs out
>>>>>> of my network.
>>>>>
>>>>> Possibly never,...at least in the practical near future sense.
>>>>>
>>>>>> I'm all Windows XP Pro and alot of what I read says it's ok.
>>>>>> However, I hear tidbits that maybe Exchange or SMS still needs
>>>>>> it.
>>>>>
>>>>> There is more to it than MS Products. There is a whole "world
>>>>> full" of products out there to worry about. Symantec Antivirus
>>>>> Corperate Edition, for example, needs netbios naming so the SAV
>>>>> Server interact with the SAV Clients.
>>>>>
>>>>> --
>>>>> Phillip Windell [MCP, MVP, CCNA]
>>>>> www.wandtv.com
>>>>> -----------------------------------------------------
>>>>> Understanding the ISA 2004 Access Rule Processing
>>>>> http://www.isaserver.org/articles/IS...cessRules.html
>>>>>
>>>>> Microsoft Internet Security & Acceleration Server: Guidance
>>>>> http://www.microsoft.com/isaserver/t...dance/2004.asp
>>>>> http://www.microsoft.com/isaserver/t...dance/2000.asp
>>>>>
>>>>> Microsoft Internet Security & Acceleration Server: Partners
>>>>> http://www.microsoft.com/isaserver/partners/default.asp
>>>>>
>>>>> Deployment Guidelines for ISA Server 2004 Enterprise Edition
>>>>>
>>>
> http://www.microsoft.com/technet/pro...isaserver.mspx
>>>>> -----------------------------------------------------