How does Windows know exactly when the computer is connected to the Internet? This article answers the question by explaining the whole process of Internet connection monitoring in Windows.

Network Connectivity Status Indicator

The Network Connectivity Status Indicator (NCSI) is a mechanism that controls the internet connectivity display in the Taskbar, among various other functionalities. NCSI is part of the Network Awareness program which was first introduced in Windows Vista and has been carried out ever since in each version of Windows. This mechanism is considered to be a smart notification system for users to know about their current internet status. If the NCSI is unable to perform its function, it will indicate that there is no internet availability, even though the computer is able to access the internet through the browser and ping other IP addresses.

How NCSI works

The NCSI works in two critical steps to check the internet’s status that the computer is connected to. These two tasks are performed independently. From step 1, if the text file is received containing the exact match, Windows establishes that the computer is connected to the internet. If, however, the text file is not downloaded or has been redirected, NCSI moves on to the second step. Once NCSI resolves for dns.msftncsi.com, it then checks if the page is accessible. If the page is accessible, the network icon in the notification tray shows that it has internet access. However, if the page is inaccessible, it prompts that additional authentication may be required. But if the DNS resolution fails entirely, or returns to a different IP address, the network icon displays “No internet access.” A similar scenario may occur if you are working behind a firewall and it blocks all inbound and outbound traffic, and only allows certain traffic to pass through. This would mean that NCSI would not be able to communicate with www.msftncsi.com and www.msftconnecttest.com. This would in-turn prompt Windows to show that there is no internet available on your computer. A workaround for this is to allow both inbound and outbound communication through the firewall for the above-mentioned URLs.

What about your privacy?

According to the documentation provided by Microsoft on NCSI, their servers store the time of access as well as the IP addresses when a DNS lookup request is made to www.msftncsi.com. Although they claim that the information is kept confidential, some people can still be uncomfortable with it. A workaround for this is by disabling the NCSI feature on your Windows. It can be achieved by altering the System Registries, as well as from the Group Policy Editor.

How to disable NCSI from Registry Editor

How to disable NCSI from Group Policy Editor

The same functionality can also be achieved through the Group Policy Editor. Note that changing this parameter will stop your operating system from communicating with the NCSI servers, hence no more prompts will be given on whether the browser requires additional authentication. On the contrary, the Notification tray will now show that there is no internet access, even when there is. Some people have experienced problems with their applications such as Office 365, Skype, OneDrive, and Outlook after disabling NCSI. However, in our case, all the applications were functioning as usual. We hope that you find this information valuable. Also see:

What Is Windows Credential Manager and How To Use It?How to Check if Windows Firewall is Blocking PortsHow To Install Internet Information Services (IIS) On WindowsWhat Are User Privileges In Windows 10How to Fix Connected Wi-Fi But No Internet Access