When performing this attack, we will find two different scenarios. #1: the attacker machine, the victim, and the DNS server are all in the same network segment. #2: the attacker machine is in the same network segment of the Windows victims and the DNS server is placed in another network segment.