Routing and Remote Access is needed for a VPN connection. If this opens a VPN gate to update this DNS dynamically, then I could see RRAS knocking down Netbios. This goes along with what I was saying earlier. RRAS knocks down Netbios because it enables windows firewall.
(( Well Just a theory)).