Thanks everyone for the feedback!
I like the idea of disabling transition protocols, it seems the least intrusive and allows to cleanup logs a bit :)
Regards,
... Alex ...
Alexandre Cop
Windows Product Engineer
UoD IT, University of Dundee
-----Original Message-----
From: Support issues for windows in UK HE & FE [mailto:[log in to unmask]] On Behalf Of Kenneth Stevenson
Sent: 22 May 2018 14:37
To: [log in to unmask]
Subject: Re: Disabling IPv6 on clients
Hi,
We've previously seen a case where someone brought a machine onto a network which had previously had a USB WLAN adapter and internet connection sharing switched on and then the WLAN adapter removed. This machine continued to advertise connection sharing and caused machines on the same subnet to dynamically register AAAA records which referred to it. It was possible to locate those machines using the following in PowerShell
Get-DnsServerResourceRecord -ZoneName your.ad.forest.dns -RRType AAAA | ? { $_.RecordData.IPv6Address.IPAddressToString -match '2002(:\w+){7}' }
To be honest, that was before we had DNS cmdlets so the actual command then was as follows
& dnscmd /enumrecords campus.gla.ac.uk `@ /continue | % { if ( $_ -match '2002(:\w+){7}'){$_}}
Like others we disable transitional technologies and leave native IPv6 enabled on clients.
Kenny
-----Original Message-----
From: Support issues for windows in UK HE & FE <[log in to unmask]> On Behalf Of Alexandre Cop (Staff)
Sent: 22 May 2018 10:42
To: [log in to unmask]
Subject: Disabling IPv6 on clients
Hi all,
We're investigating some odd behaviours/lags in our estate at the moment, and we are wondering whether we're seeing timeouts related to name resolution.
One question that came up recently was whether we should disable IPv6 on the client side, given that we don't route it.
I seem to recall that Microsoft was not in favour of doing so in Windows 7, and I'm not even sure if it's possible in Windows 10.
What is your experience? Do you:
- Disable IPv6
- Route IPv6 internally
- Have some magic settings that makes IPv6 behave (instead of the potential risk of having packets going down the IPv6 ether)
Thanks!
Regards,
... Alex ...
Alexandre Cop
Windows Product Engineer
UoD IT, University of Dundee
The University of Dundee is a registered Scottish Charity, No: SC015096
The University of Dundee is a registered Scottish Charity, No: SC015096
