Windows Server – Disable Network Locations

firewallgroup-policynetworkingwindowswindows-server-2008

I'm not sure what exactly this feature is called. But in Windows Server 2008, it has the Vista Public/Private/Domain locations. This makes sense for laptops, and none at all for servers.

My problem is that sometimes some network adapters decide they are now on a public network. This completely activates the firewall, even for the "domain" networks. So net effect is that I reboot some machines, and then they never come back on the network until we KVM in and tell it that the network is private.

What's the name of this feature? Is there a GP setting I can use to turn it off and make all networks be "domain"?

Edit: Thanks, that's that NLA is. I tried disabling the service on a non-domain machine, and it just flips everything public. On a domain machine, the Network List Service refuses to stop — I'll try group policy.

Best Answer

Just ran into this exact problem. Unidentified networks are by default set to type of "Public". This is awkward when you want Windows Firewall to be active on Public networks but not Private ones -- and your internal network is always "Unidentified".

What's an "Unidentified" network to Windows Server 2008?

The Network Lists service (netprofm) works with the Network Location Awareness service (nlasvc) to identify networks and find the associated saved settings for the network, if any. The NLA service will use a Default Gateway or SSID to identify a network, so if the NIC has neither a Default Gateway or associated SSID, then NLA will determine that the network is Unidentified.

You can however change the default -- so that so-called "Unidentified" networks will be defaulted to something other than Public:

  1. Open Administrative Tools -> Local Security Policy.

  2. Highlight the "Network List Manager Policies" item, then double click the "Unidentified Networks" on the right panel.

  3. Set the "Location Type" to "Private" or "Public".

screenshot of change being made in Windows 2012 Server

Worked for me!

Related Topic