Markaad ku xidho shabakada domain ama shabakad shirkad, ka dib Windows Firewall wuxuu u wareegayaa astaanta domain. Xogta guud waxay quseysaa shabakadaha halkaas oo nidaamka martida loo yahay uu ka xaqiijin karo maamulaha domainka. Labada profile ee kale waa kuwo gaar ah iyo kuwo guud. Hadda waxa laga yaabaa inay dhacdo in marka aad ku xidho domain, profile-ka Windows Firewall had iyo jeer ma beddelo Domain . Waxay badanaa dhacdaa markaad isticmaaleyso macmiilka saddexaad ee shabakad khaas ah^{(third-party virtual private network)} ( VPN ) si aad ugu xidho shabakada domainka. Maqaalkan, waxaanu ku siin doonaa xal hubin doona in Windows Firewall uu beddelo astaanta xaaladdan.

Windows Firewall ma aqoonsanayo shabakadda Domain

Waxaa laga yaabaa inay dhacdo in astaantaada Windows Firewall uusan had iyo jeer u wareegin Domain marka aad isticmaaleyso macmiil VPN oo dhinac saddexaad ah. ^(VPN)Sababta ka danbeysa guuldarada lagu badalayo astaanta bogga waa wakhtiga dib u dhaca ku yimid qaar ka mid ah macaamiisha VPN ee qolo saddexaad. ^(VPN)Dib u dhacu wuxuu yimaadaa marka macmiilku ku daro dariiqyada lagama maarmaanka ah ee shabakada domainka. VPN^(VPNs) -yadu waxay beddelaan ciwaanka IP-ga mar kasta oo aad u beddesho server cusub ama marka aad samayso xidhiidh cusub. Sida xal rasmi ah, Microsoft waxay ku talinaysaa in VPN^(VPNs) -yada ay isticmaalaan API-yada^(APIs) dib-u-soo-celinta si ay ugu daraan waddooyin isla marka uu adabtarada VPN yimaado Windows . Kuwani waa saddexda API ee aVPN waa in loo isticmaalo Windows .

• NotifyUnicastIpAddressChange : Ogaysii dadka soo wacaya isbedel kasta oo ku yimaada ciwaanka IP-ga, ay ku jiraan isbedelada gobolka DAD .
• NotifyIpInterfaceChange : Waxay diiwaangelisaa dib-u-warcelinta ogeysiinta isbeddelada dhammaan is-dhexgalka IP-ga.
• NotifyAddrChanget : Waxay ogeysiisaa isticmaalaha isbeddellada ciwaanka.

Hawsha sidii Firewall loogu bedeli lahaa Profile Domain^{(Workaround to switch Firewall to Domain Profile)}

Haddii VPN -kaagu aanu bixin sifooyinkaas oo kale, oo aanad u beddeli karin VPN ka duwan , markaa halkan waa hab ka-hortag. Adiga ama maamulka IT-ga waxaad dooran kartaan inaad damiso khasnado taban si ay u caawiyaan adeega NLA marka ay isku daydo ogaanshaha domainka.

Haddii aad u baahan tahay inaad abuurto mid ka mid ah furayaashan, ku dhufo midigta mid ka mid ah muraayadda ku habboon, oo dooro cusub ka dibna nooca furayaasha. Halkan waxaad u baahan tahay midig-guji shayga saxda ah ka dibna dooro DWORD cusub .

Ku dar ama beddel Mudada Cache-ga xun^{(Add or change Negative Cache Period)}

Demi Domain Discovery cache taban adiga oo ku daraya furaha diiwaangelinta NegativeCachePeriod furaha hoose ee soo socda

• Fur Registry Editor oo u gudub furaha soo socda:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters

• Beddel ama samee DWORD soo socota oo leh qiimaha la soo jeediyay
  • Magaca: NegativeCachePeriod
  • Nooca:  REG_DWORD
  • Xogta Qiimaha:  0

Qiimaha caadiga ah ee kaydka taban waa 45 ilbiriqsi. Dejinta eber waxay joojinaysaa kaydinta

Ku dar ama beddel Max Negative Cache TTL^{(Add or change the Max Negative Cache TTL)}

Haddii arrinta weli aan la xalin, tallaabada xigta waa in la joojiyo kaydinta DNS . Waxaad taas ku gaari kartaa adigoo ku daraya  furaha diiwaanka MaxNegativeCacheTtl .

• Furo Tifaftiraha Diiwaanka
• U gudub jidka soo socda:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters

• Beddel ama samee DWORD soo socota oo leh qiimaha la soo jeediyay
  • Magaca:  MaxNegativeCacheTtl
  • Nooca :  REG_DWORD
  • Xogta Qiimaha :  0

Qiimaha caadiga ah ee kaydka taban ee ugu sarreeya waa shan ilbiriqsi. Marka aad dhigto eber , waxay joojin doontaa kaydinta

Waxaan rajeynayaa in goobta shaqada ay ka caawisay astaanta Windows Firewall inuu u wareego astaanta Domain profile marka aad isticmaaleyso macmiil VPN oo dhinac saddexaad ah . Ilaa macmiilkaaga VPN uu taageero dib u yeedhista ^(VPN)API si uu u ogeysiiyo isbeddelka, isbeddelada Diiwaangelinta^(Registry) waa in ay ku caawiyaan.

Windows Firewall not recognizing Domain network on Windows 10

When you connect to a domain network or а company network, thеn Windows Firewall switches to a domain profile. The profile applies to networks where the host system can authenticate to a domain controller. The other two profiles are private and public. Now it may so happen that when you connect to a domain, the Windows Firewall profile does not always switch to Domain. It usually occurs when you are using a third-party virtual private network (VPN) client to connect to a domain network. In this post, we will offer a solution that will make sure the Windows Firewall switches the profile in this situation.

Windows Firewall not recognizing Domain network

It may happen that your Windows Firewall profile does not always switch to Domain when you use a third-party VPN client. The reason behind the failure in changing to domain profile is the time lag in some third-party VPN clients. The delay occurs when the client adds the necessary routes to the domain network. VPNs change the IP address every time you switch to a new server or when you make a new connection. As a permanent solution, Microsoft recommends that the VPNs use callback APIs to add routes as soon as the VPN adapter arrives at Windows. These are the three API that a VPN should use for Windows.

• NotifyUnicastIpAddressChange: Alerts callers of any changes to any IP address, including changes in DAD state.
• NotifyIpInterfaceChange: Registers a callback for notification of changes to all IP interfaces.
• NotifyAddrChanget: Notifies the user about address changes.

Workaround to switch Firewall to Domain Profile

If your VPN doesn’t offer such features, and you cannot switch to a different VPN, then here is a workaround. You or the IT admin can choose to disable negative cache to help the NLA service when it retries domain detection.

If you need to create any of these keys, right-click on any the appropriate pane, and select new and then the type of keys. Here you need right-click on the right pane and then select new DWORD.

Add or change Negative Cache Period

Disable Domain Discovery negative cache by adding the NegativeCachePeriod registry key to the following subkey

• Open Registry Editor and navigate to the following key:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NetLogon\Parameters

• Change or create the following DWORD with the suggested value
  • Name: NegativeCachePeriod
  • Type: REG_DWORD
  • Value Data: 0

The default value of the negative cache is 45 seconds. Setting it to zero will disable caching.

Add or change the Max Negative Cache TTL

If the issue is still not resolved, the next step is to disable DNS caching. You can achieve this by adding the MaxNegativeCacheTtl registry key.

• Open Registry Editor
• Navigate to the following path:

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Dnscache\Parameters

• Change or create the following DWORD with the suggested value
  • Name: MaxNegativeCacheTtl
  • Type: REG_DWORD
  • Value Data: 0

The default value of the max negative cache is five seconds. When you set it to zero, it will disable caching.

I hope the workaround helped Windows Firewall profile to switch to Domain profile when you use a third-party VPN client.  Unless your VPN client supports the callback API to notify about change, the Registry changes should help.

Related posts

• Windows Firewall ayaa ka hortagaya ama xannibaya isku xirka kombiyuutarkaaga

• Sida loo soo celiyo ama dib loogu soo celiyo dejimaha Firewall Windows si ay u noqdaan kuwo khaldan

• Sida loo isticmaalo taliska Netsh si aad u maamusho Windows Firewall

• Sida loo xannibo ama loo furo dekedda Windows Firewall

• Sida loogu oggolaado Pings (codsiyada ICMP Echo) iyada oo loo marayo Windows Firewall

• Ka jooji abka iyo ciyaaraha gelitaanka intarneedka, oo wata Windows Defender Firewall

• Sida loo habeeyo Gelitaanka otomaatiga ah ee Windows 10 Domain or Workgroup PC

• Ma u baahan tahay Firewall aalladda Android?

• Soo rar, Dhoofinta, Dayactir, Soo Celinta Nidaamka Dab-damiska ee caadiga ah gudaha Windows 11/10

• Hagaaji Adeegyada Domain Directory Active hadda lama heli karo

• Sida Looga Wareego Dugsigaaga Ama Dab-damiska Goobta Shaqada

• TinyWall wuxuu kuu ogolaanayaa inaad adkeyso oo aad maamusho Windows 10 Firewall

• Oggolow ama ka xannib abka abka Windows Firewall

• Sida loo habeeyo Windows Firewall gudaha Windows 11/10

• Deked xiran vs Stealth Port - Farqiga ayaa laga wada hadlay

• Waa maxay Firewall iyo Ilaalinta Shabakadda ee Windows 10 iyo sida loo qariyo qaybtan

• OneClickFirewall: Jooji ama oggolow gelitaanka internetka iyada oo loo marayo Menu Context

• Sida Loo Joojiyo ama Looga Furo Barnaamijyada Gudaha Dab-demiska Windows

• 5 siyaabood oo loo furo Windows Defender Firewall -

• Sida loo damiyo ama loo damiyo Firewall gudaha Windows 11/10