Description:

Everyone knows about WPAD query in user space, but today I catch WPAD query in system space. Windows 7 have wonderful feature, which give you to know about your Internet connection little more - NCSI. At boot time, the operating system occur several WPAD requests, even before any user authentication.

Disable WPAD (user space):

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Internet Settings\Wpad\WpadOverride = 1

Disable WPAD (system space):

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet\EnableActiveProbing = 0

Disable ISATAP:

netsh interface ipv6 isatap set state state=disabled

Disable Teredo:

netsh interface teredo set state disabled

Disable LLMNR:

HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows NT\DNSClient\EnableMulticast = 0