msftconnecttest/msftncsi: Trouble connecting to Web sites and services because of certificate errors? Check if you’re being held captive – The Old New Thing
Posted by jpluimers on 2025/09/05
Note that http://neverssl.com is the way to figure out if you are in a captive portal, see below.
In Windows 10, the name of the endpoint changed from
msftncsitomsftconnecttest, presumably to make the purpose of the access more obvious in security and audit logs. Nobody will understand that NCSI stands for Network Connectivity Status Indicator.
[Wayback/Archive] Trouble connecting to Web sites and services because of certificate errors? Check if you’re being held captive – The Old New Thing
It refers to a few other interesting sites, for instance about modifying if/how NCSI detects internet connectivity:
- [Wayback/Archive] How does Windows decide whether your computer has limited or full Internet access? – The Old New Thing
- [Wayback/Archive] An Internet Explorer or Edge window opens when your computer connects to a corporate network or a public network – Windows Client | Microsoft Learn
- [Wayback/Archive] Manage connections from Windows 10 and Windows 11 Server/Enterprise editions operating system components to Microsoft services – Windows Privacy | Microsoft Learn: network connection status indicator
You can turn off NCSI by doing one of the following:-
Enable the Group Policy: Computer Configuration > Administrative Templates > System > Internet Communication Management > Internet Communication Settings > Turn off Windows Network Connectivity Status Indicator active testsNoteAfter you apply this policy, you must restart the device for the policy setting to take effect.
-or-- Create a
REG_DWORDregistry setting namedNoActiveProbeinHKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkConnectivityStatusIndicatorwith a value of1(one).
-
- [Wayback/Archive] Policy CSP – Connectivity – Windows Client Management | Microsoft Learn
- [Wayback/Archive] Use authenticated proxy servers – Windows Client | Microsoft Learn
As mentioned at the top: my blog post on http://neverssl.com: NeverSSL – helping you get online on WiFi networks requiring authentication
Other related blog posts:
–jeroen
The Wiert Corner - irregular stream of stuff 
Leave a comment