Question

Difficulty: HardWindows Client Networking Configuration

A desktop technician is deploying new Windows 11 Workstations into a small corporate branch office. Users report that while they can browse external websites and ping internal network devices by IP address, their computers cannot discover local peer shares or printers on the local subnet. Upon inspection, the technician verifies that all clients have valid static IPv4 addresses, correct subnet masks, and functioning DNS servers. The local Windows Defender Firewall inbound rules for Network Discovery are blocked due to the active network connection classification. Which of the following configuration changes should the technician make on the Windows 11 clients to enable Network Discovery and local resource sharing without disabling the firewall?

  1. Change the active network connection profile from Public to Private in Network & Internet settings.Answer
  2. B
    Reconfigure the static IPv4 properties on each client to include an alternate default gateway within the APIPA range.
  3. C
    Execute the CLI command ipconfig /registerdns from an elevated command prompt to clear the local NetBIOS cache.
  4. D
    Open the Credential Manager applet in Control Panel and create a new Windows Credential entry for each local subnet host.

Answer

The technician should change the active network profile from Public to Private in the Windows Network & Internet settings.
In Windows client networking, network connections are designated as either Public or Private. On a Public network profile, Windows Firewall blocks incoming Network Discovery and File Sharing requests to protect the endpoint. Changing the profile location to Private indicates a trusted network, which automatically enables Network Discovery and permits local peer sharing while keeping the firewall active.

Step-by-Step Solution

1
Analyze the network behavior and symptoms.
Layer 3 IP communication and internet routing are functioning (ping and web browsing work), but local peer discovery protocols are blocked.
When a network connection is configured under the 'Public' network profile in Windows 11, Network Discovery and File and Printer Sharing are disabled by default in Windows Firewall for security.
2
Evaluate the necessary configuration change to allow Network Discovery.
Changing the network location profile from 'Public' (untrusted network) to 'Private' (trusted office network) applies the appropriate firewall rules.
The 'Private' profile automatically opens the necessary firewall ports for Network Discovery and local broadcast protocols without turning off overall firewall protection.

Key Concept

Windows Network Profiles (Public vs. Private) and Network Discovery Settings
Rate this question