Turn off LLMNR
Disables Link-Local Multicast Name Resolution.
Applying it needs Nexus Standard or Pro. Every plan can read it here and undo it in Restore Center. Compare plans
What it changes
HKLM\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast = 0
Before anything is written, the review screen shows this setting's current value on your PC next to the new one.
Why it helps
Prevents a common credential-capture attack on shared networks.
Trade-offs
Name resolution of other PCs without DNS falls back to NetBIOS/mDNS.
Evidence
Strong evidence means: documented by microsoft or consistently measurable. Expected impact is small (1 of 3): how much it can matter when this is actually the bottleneck on your PC, not a promised gain.
Is it in a pack?
No. It isn't hand-picked as recommended, so you apply it on its own, after reading the trade-offs.
How to undo
Switch the tweak off in Nexus, or open Restore Center and restore this change (or choose Undo last change). Nexus writes back the original value it recorded before applying, not a generic default, then reads it back to confirm.
More in Security hardening
- Turn off AutoRun for all drivesStops programs starting automatically from inserted USB drives and discs.SafeSecurityRecommended
- Turn off AutoPlayStops Windows asking what to do with inserted media and devices.SafeSecurity
- Turn off smart multi-homed name resolutionStops DNS queries being sent over every network adapter at once.SafeSecurity
- Disable the SMBv1 serverTurns off the obsolete SMB1 file-sharing server protocol.SafeSecurityRecommended
- Turn off Remote AssistanceStops this PC accepting Remote Assistance invitations.SafeSecurityRecommended
- Turn off Remote DesktopDenies incoming Remote Desktop connections.CautionSecurity