question

ChrisDz-4054 avatar image
0 Votes"
ChrisDz-4054 asked cheong00 commented

good idea add www.msftconnecttest.com dns zone on internal dns ?

Hi,
Our station doesn't have external DNS resolution.
the dns resolution is made by our http proxy.

So internet connexion test is marked as failed. Station can't resolve www.msftconnecttest.com by themselves.

Is it a good idea to add a DNS zone on our internal DNS server that resolve www.msftconnecttest.com ?
85642-2021-04-08-08-29-59-mremoteng-confconsxml-srv-dc-0.png


windows-server-2016
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

CandyLuo-MSFT avatar image
1 Vote"
CandyLuo-MSFT answered cheong00 commented

Hi,

For NCSI validates your connectivity to the Internet, the following two methods are performed, and if it fails, "No Internet access" is displayed:

(1) You can access www.msftconnecttest.com/connecttest.txt (ipv6.msftconnecttext.com for IPv6) by HTTP and get the Microsoft Connect Test file.

(2) DNS name resolution of dns.msftncsi.com matches "{Ipaddresspii}"

If Windows can successfully make these DNS and HTTP requests, it should believe it has an internet connection.

So, in your case, you need to set up dns.msftncsi.com name in a local DNS service that maps to IP address 131.107.255.255. And set up www.msftconnecttest.com name pointing to a local HTTP server that can serve a /connecttest.txt URI, the result should be Microsoft Connect Test.

For more details, you can refer to the following link (pay attention to what telcoM said):

https://superuser.com/questions/1400187/get-rid-of-false-no-internet-network-message

Please Note: Since the web site is not hosted by Microsoft, the link may change without notice. Microsoft does not guarantee the accuracy of this information.

Best Regards,
Candy


If the Answer is helpful, please click "Accept Answer" and upvote it.

Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

· 4
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

I think he mean the stations do not have DNS access to external network, and don't need DNS resolution for web access as it can be done on the proxy.

So the part regarding setup local DNS for dns.msftncsi.com and www.msftconnecttest.com should be answer.

1 Vote 1 ·

Yes, you are right. I have modified the answer.

1 Vote 1 ·

don't you think it's a bit dirty as solution ?

0 Votes 0 ·

IMO that's less problematic than to disable NCSI probes because as said in that article, other Microsoft components may be using it.

So just satisfying it's need should be the more favorable solution.


0 Votes 0 ·