The Group Policy setting “Deny connecting to non-domain networks when connected to a trusted domain network” prevents computers from simultaneously connecting to domain and non-domain networks.
When this policy setting is enabled, the computer responds to automatic and manual attempts to connect to the network based on the following conditions.
Automatic connection attempts
-If the computer is already connected to a domain network, all automatic attempts to connect to non-domain networks are blocked.
-If the computer is already connected to a non-domain network, then attempts to automatically connect to domain networks are blocked.
Manual connection attempts
-If the computer is already connected to a domain or non-domain network using media other than Ethernet, and the user tries to manually connect to an additional network in violation of this policy setting, then the existing network connection is interrupted and the manual connection is allowed.
-If the computer is already connected to a domain or non-domain network via Ethernet and the user tries to manually establish a connection to an additional network in violation of this policy setting, then the existing connection via Ethernet is retained, and the manual connection attempt is blocked.
If this policy setting is not configured or is disabled, computers can simultaneously connect to domain and non-domain networks.
Today we will look at how to enable or disable the ability to simultaneously connect to domain and non-domain networks in Windows 10.
Enable or disable simultaneous connection to domain and non-domain networks in group policies
1. Open Group Policy: in the search bar or in the Run menu (run by pressing Win + R) enter gpedit.msc and press the Enter key.
2. Follow the path Computer configuration => Administrative Templates => Network => Windows Connection Manager => open the parameter Prevent connection to networks without a domain when connected to a trusted domain network
3. Put a dot next to “Enabled” and click on “OK” if you want to prohibit simultaneous connection to domain and non-domain networks. If you want to allow simultaneous connection to domain and non-domain networks, put a dot next to “Not configured” or “Disabled”. Close the Local Group Policy Editor window.
Enable or disable simultaneous connection to domain and non-domain networks in the registry editor
1. In the search bar or in the “Run” menu (run by pressing the Win + R keys) enter regedit and press the Enter key.
2. Follow the path HKEY_LOCAL_MACHINE SOFTWARE Policies Microsoft Windows WcmSvc GroupPolicy => right-click on the GroupPolicy section, select “New” => “DWORD Parameter (32 bit)” => name the new parameter fBlockNonDomain
3. Open the parameter fBlockNonDomain => to prohibit simultaneous connection to domain and non-domain networks – in the “Value” field, enter 2 and click on “OK”. To allow simultaneous connection to domain and non-domain networks, remove the fBlockNonDomain parameter. Close the registry editor, in some cases you need to restart your computer for the changes to take effect.
That’s all for today, if you know other methods, write in the comments! Good luck ?
