Incorrect Client Network Status

Question

Dear Experts,

The Internet connection status of some of our clients shows disconnected randomly. When it happens, the user has Internet access but can't open Outlook profile which depends on the connection status.

The status will recover, if we restart NLA services but we want to It always happen? By the way, we have an unstable domain server, does it matter?

We have checked below info:

1.Active probing must be enabled.

HKLM\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet\EnableActiveProbing should present with value 1.

[HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator] NoActiveProbe should either not present, or value must be 0.

2.Passive probing must be enabled as well.

In case active probing fails, passive probing can also detect internet unless it’s disabled by GPO. Check below to make sure the customer didn’t disable passive probing. If it is, enable it and test again.

Group Policy path: Computer Configuration\Administrative Templates\Network\Network Connectivity Status Indicator
setting: "Specify passive polling" = Enabled, uncheck "Disable passive polling"

This GPO setting can be also confirmed from this registry key:

[HKLM\Software\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicator] DisablePassivePolling = 1

Answer 1

Domain controller and all members should only have domain DNS so clients can find and logon to domain. Internet queries are passed on via default gateway to the default 13 root hint server or optionally to configured forwarders. None of which works when domain controller is broken.

--please don't forget to upvote and Accept as answer if the reply is helpful--

Answer 2

By the way, we have an unstable domain server, does it matter?

Yes, it matters greatly. Simple solution may be to stand up a new one for replacement. I'd use dcdiag / repadmin tools to verify health correcting all errors found before starting any operations. Then stand up the new one, patch it fully, license it, join existing domain, add active directory domain services, promote it also making it a GC (recommended), transfer FSMO roles over (optional), transfer pdc emulator role (optional), use dcdiag / repadmin tools to again verify health, when all is good you can decommission / demote old one.

--please don't forget to upvote and Accept as answer if the reply is helpful--