Investigate an NCSI connectivity indicator using the network transition that triggered it

Source facts

NCSI sends active connectivity probes when a network interface becomes usable after changed conditions, including wired, wireless, and VPN connections. After a successful probe without a proxy, NCSI records that condition and updates the connectivity indicator. A captive portal that still requires input can leave the interface classified as local connectivity. Microsoft documentation.

Applicability

Use this review for an unexpected Windows connectivity indication after connecting or changing networks. Record the interface, connection method, portal state, and any proxy involvement before selecting a troubleshooting step.

DSE recommendation

Build a timeline from the actual transition: connection establishment, portal interaction, and the indicator shown to the user. Compare the indicator with access to the particular business application being investigated. Preserve the network conditions during reproduction and change one approved variable at a time. Ask the network owner to review any proposed probe or proxy policy change.

Verification

Repeat the connection in an approved test and record when the indicator changes. For portal networks, record the state before and after completing the required interaction. Retain evidence for both the probe path and the business application path. If they disagree, describe the disagreement precisely instead of closing the incident solely because one test succeeds.

Official references

Microsoft Learn: Network Connectivity Status Indicator FAQ for Windows. Source reviewed September 8, 2026.