How could I create a Compliance Settings that enforces NetBIOS over TCP/IP?

Question

Hello Everyone,
I need to be able to enforce NetBIOS over TCP/IP on some collections. I've created a batch script  with one line that disable NetBIOS over TCP/IP but I also need to make sure this is enforced. How could I do the enforcement using Compliance Settings?
This is the line I use to disable it;
"wmic nicconfig where (TcpipNetbiosOptions!=Null and TcpipNetbiosOptions!=2) call SetTcpipNetbios 2"
Thank you everyone in advance for any help

Answer 1

I could probably help you with a CI for discovery and remediation, but I need (or you need to define) an additional parameter.
If I were to run this as a powershell discovery script:
$adapter=(gwmi win32_networkadapterconfiguration | where {$_.ipenabled -eq "1"})
Foreach ($nic in $adapter) {
write-host $nic.TcpIPNetBiosOptions
what's echo'd out (in my testing) is a 0, a 1 , or a 2.
0 means "default--use what your dhcp is offering"
1 = enabled
2 = disabled.
So... from your standpoint... is a 0 or 1, (either one) acceptable?  or is only a value of 1, a hard-coded at the client (not whatever the default is from dhcp) the only acceptable value?
fyi, the remediation script, if 1 is the only acceptable answer, would probably be this:
$adapter=(gwmi win32_networkadapterconfiguration | where {$_.ipenabled -eq "1"})
Foreach ($nic in $adapter) {
$adapter.settcpipnetbios(1)
Standardize. Simplify. Automate.