I found the NCSI link below after I disabled the "Link-Layer Topology Discovery Mapper I/O Driver" on the appropriate NIC. I decided to wait and see if that fixed the original problem before re-enabling it and making any other changes such as whitelisting the appropriate URIs or adopting the registry change suggested in the MS article. So far, the problem has not re-occurred and the users are DHCP once again with filtering enabled. I'll post a wrapup sometime next week when I've got more information.
From: Angus Scott-Fleming [mailto:[email protected]] Sent: Friday, October 02, 2009 2:28 PM To: NT System Admin Issues Subject: Re: Vista, 7, etc method of determining if a network connection has "Internet Access" On 29 Sep 2009 at 14:02, Richard Stovall wrote: > I think I may have found the phantom "MS URL". > > http://technet.microsoft.com/en- > us/library/cc766017%28WS.10%29.aspx describes how Vista and above > reach out to http://www.msftncsi.com/ncsi.txt > > When I get it all figured out I'll post back to the group... That article describes how to disable the NCSI check. I'd either try that OR allow access to www.msftncsi.com and/or dns.msftncsi.com through the firewall. -- Angus Scott-Fleming GeoApps, Tucson, Arizona 1-520-895-3270 ~! ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~
