ML
    • Recent
    • Categories
    • Tags
    • Popular
    • Users
    • Groups
    • Register
    • Login

    What's behind the scenes of Windows network discovery?

    Scheduled Pinned Locked Moved IT Discussion
    13 Posts 4 Posters 332 Views
    Loading More Posts
    • Oldest to Newest
    • Newest to Oldest
    • Most Votes
    Reply
    • Reply as topic
    Log in to reply
    This topic has been deleted. Only users with topic management privileges can see it.
    • DashrenderD
      Dashrender @1337
      last edited by

      @Pete-S said in What's behind the scenes of Windows network discovery?:

      I'm setting up a Windows application that is multi-user but the losers made it so the installation program sets up file shares (UNC paths \server\share\folder), despite it being based on having SQL Server.

      Sounds like those losers were at following the licensing. You can't publish SQL server via it's own port on Windows non Server editions, not legally. But you can publish shared SMB folders til the cows come home. So while it's crappy that it's not pulling directly from a published DB, at least it seems they are trying to follow the licensing.

      scottalanmillerS 1 Reply Last reply Reply Quote 0
      • 1
        1337
        last edited by

        I had a look and it looks like SMBv1 is disabled.

        Wikipedia says Simple service discovery is using multicast behind the scenes. It looks like the "SSDP Discovery" service is what is running it and it's running right now.

        A hosts file might be the answer. And just disable the other crap. Since it's all static IPs it should work.

        I could probably disable netbios crap as well.

        1 Reply Last reply Reply Quote 0
        • scottalanmillerS
          scottalanmiller @Dashrender
          last edited by

          @Dashrender said in What's behind the scenes of Windows network discovery?:

          You can't publish SQL server via it's own port

          It's port or its own port aren't relevant. How you connect to SQL Server doesn't matter. That you are connecting to it and using its resources, does.

          1 1 Reply Last reply Reply Quote 1
          • 1
            1337
            last edited by

            What I wonder now is how access to the shared files is granted. I have to look into that. AFAIK I didn't enter any passwords anywhere during installation.

            DashrenderD 1 Reply Last reply Reply Quote 0
            • 1
              1337 @scottalanmiller
              last edited by

              @scottalanmiller said in What's behind the scenes of Windows network discovery?:

              @Dashrender said in What's behind the scenes of Windows network discovery?:

              You can't publish SQL server via it's own port

              It's port or its own port aren't relevant. How you connect to SQL Server doesn't matter. That you are connecting to it and using its resources, does.

              It's looks like the Express edition if it matters. Technically speaking one of the Windows 10 PCs acts as a server, so it could be a violation. Right now I don't care though.

              DashrenderD 1 Reply Last reply Reply Quote 0
              • DashrenderD
                Dashrender @1337
                last edited by

                @Pete-S said in What's behind the scenes of Windows network discovery?:

                @scottalanmiller said in What's behind the scenes of Windows network discovery?:

                @Dashrender said in What's behind the scenes of Windows network discovery?:

                You can't publish SQL server via it's own port

                It's port or its own port aren't relevant. How you connect to SQL Server doesn't matter. That you are connecting to it and using its resources, does.

                It's looks like the Express edition if it matters. Technically speaking one of the Windows 10 PCs acts as a server, so it could be a violation. Right now I don't care though.

                Old QuickBooks had a server too - but it was all filesharing based - so there was no violation. But they changed that at some point, and now a service is running and that's being shared, so that's the violation - as long as you don't have a service, and all the work is done solely through SMB, you're fine, legally.

                1 Reply Last reply Reply Quote 0
                • DashrenderD
                  Dashrender @1337
                  last edited by

                  @Pete-S said in What's behind the scenes of Windows network discovery?:

                  What I wonder now is how access to the shared files is granted. I have to look into that. AFAIK I didn't enter any passwords anywhere during installation.

                  The install could have created local accounts with or without passwords.

                  1 Reply Last reply Reply Quote 0
                  • 1
                    1337
                    last edited by 1337

                    I had some success.

                    • I disabled netbios in the network settings.
                    • I disabled LLDP, IPv6 and the rest of the layer discovery stuff in the network stack and left "Client for MS Networks", "File & Printer sharing", QoS and IPv4.
                    • I disabled SSDP service (simple service discovery).
                    • I disabled Function Discovery Provider Host & Function Discovery Resource Publication services.

                    Then I put in the computer names & IPs in the DNS. And voila, the application works again.

                    Of course you can't browse the network in the file explorer but that is just a benefit IMHO.

                    1 Reply Last reply Reply Quote 0
                    • 1
                      1337
                      last edited by

                      Just found out with some network sniffing that Win 10 is not using DNS to find the IP for hostnames. It's using multicast queries. WTF.

                      First something called LLMNR (Link-local Multicast Name Resolution). If you ping xyz, it will ask for xyz.

                      Secondly it will use mDNS (multicast DNS). If you ping xyz, it will ask for xyz.local.

                      1 1 Reply Last reply Reply Quote 0
                      • 1
                        1337 @1337
                        last edited by

                        @Pete-S said in What's behind the scenes of Windows network discovery?:

                        Just found out with some network sniffing that Win 10 is not using DNS to find the IP for hostnames. It's using multicast queries. WTF.

                        First something called LLMNR (Link-local Multicast Name Resolution). If you ping xyz, it will ask for xyz.

                        Secondly it will use mDNS (multicast DNS). If you ping xyz, it will ask for xyz.local.

                        Well, I found out why.

                        If you don't have a DNS suffix in the network settings, Win10 will use multicasting to try to resolve a hostname that doesn't have a top-level domain suffix (such as xyz).

                        If you have a DNS suffix in your settings, it will use standard DNS.

                        1 Reply Last reply Reply Quote 0
                        • 1 / 1
                        • First post
                          Last post