Network Connectivity Status Indicator overview for Windows | Microsoft Learn

Table of contents

Exit editor mode

Ask Learn

Ask Learn

Reading mode

Table of contents

Read in English

Add

Add to plan

Edit

Copy Markdown

Print

Note

Access to this page requires authorization. You can try signing in or changing directories.

Access to this page requires authorization. You can try changing directories.

NCSI overview

Applies to: ✅ Windows Server 2025, ✅ Windows Server 2022, ✅ Windows Server 2019, ✅ Windows Server 2016

Feedback

Summarize this article for me

Important

Akamai now hosts the public NCSI probe servers, which Azure Front Door formerly hosted. This change occurred on June 20, 2023. To learn more about how this change impacts you, see the NCSI FAQ page.

The Network Connectivity Status Indicator (NCSI) is a feature that helps to provide a visual display of the current network connection status. The NCSI icon is found on the bottom-right of the taskbar by default. Depending on how your device is connected to the network and what operating system is running determines its appearance.

Icon<br>Description

Connected (Wired)

Connected (Wireless)

Connected (No internet)

The network status can be viewed by clicking this icon and further network adapter details can be seen by following the Network and Internet settings link. Depending on the version of Windows you're running, the taskbar options for the NCSI icon may vary.

NCSI functionality

NCSI uses network probes that are network requests sent to an endpoint followed by a response. NCSI’s probe, referred to as an "active probe", is an HTTP request/response. It also uses passive polling, referred to as "passive probe", which examines network traffic passively to determine connectivity.

What is the purpose of NCSI in Windows?

NCSI is the component responsible for determining network connectivity exists and if it's Internet or local-only. The reason NCSI was developed to save applications the complex task of determining network configuration on its own. Every attempt to perform a task over the network would require constant attention to whether the network was still accessible. In a network outage, even intermittently, the application would time out the operation and tests the network continuously until the connection is stable.

NCSI accounts for various environmental factors such as proxies, hotspots, or captive portals. It needs to determine if the detected network can fulfill its requests, whether it requires full internet access or private corporate access. Users must wait for NCSI to either complete its checks or time out while the application decides how to handle restrictive or no network connectivity scenarios.

Active probing

An active probe is an http request sent to a web probe server for a specific NCSI address. The server hosted by Microsoft on the internet but can also be an enterprise’s own private probe server, which is a more uncommon scenario. When NCSI sends the probe and receives a valid response, it considers the client device to have internet connectivity.

When NCSI doesn’t detect internet connectivity, it's either that the probe isn't completing, or the probe is completing with failure. Some reasons for not completing can be device, network configuration, or other environmental issues. An example of completing with a failure is receiving an HTTP 403 Forbidden response, usually indicating a proxy blocked the outbound probe.

Warning

Don't disable active probing as a resolution to an NCSI issue as passive polling alone is unable to determine all network connectivity issues.

The HTTP probe hosts and contents are predefined and found in the following registry path:

HKLM\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet

NCSI sends separate IPv4 and IPv6 active probes in parallel. If either probe succeeds, NCSI determines that the device has internet connectivity.

Passive probing

Similar to active probing, passive probing uses learned information from received packets to determine network status. Both probing methods complement one another as they determine intermittent network conditions differently. Certain conditions prevent active probes from functioning correctly, such as, a temporary router having intermittent connectivity issue where a client device doesn't experience any change in the interface state. If intermittent connectivity issues cause active probing to have false negative results, passive polling can determine the connectivity status based on network traffic. This helps maintain accurate internet connectivity status.

Note

As of Windows 11, NCSI is hosted within the Network List Manager service, also known as the Network Profile Manager. Previous OS iterations were hosted in the Network Location Awareness (NLA) service.

The main goal of the passive probe is to update NCSI’s connectivity status for all active network interfaces based on packet data received. For each active interface, the...