Windows Networking on the Client
Unit 2: Windows Tools, Commands, Settings, and Networking. Lesson 10 of 41 in APlus Academy Core 2.
Putting a Windows machine on a network means choosing how it authenticates, what it shares, what its firewall allows, and how it gets its addresses. Every item here appears in performance-based questions.
Domain joined versus workgroup
- In a workgroup, each PC keeps its own local accounts; sharing between machines needs matching accounts and passwords on both. Right for homes and tiny offices.
- Domain joined: the PC becomes a member of an Active Directory domain (System, Rename this PC or join a domain, or Settings, Accounts, Access work or school). Users log in with domain accounts, Group Policy applies, and administrators manage the machine centrally. Requires Pro or above and reachability to a domain controller (DNS must point at it).
Shared resources
- Printers: shared from a PC (Devices and Printers, Sharing tab) or by a print server; clients add them by browsing or by UNC path.
- File servers: shared folders on a server or another PC; permissions are the share permissions plus NTFS permissions.
- Mapped drives: a share given a drive letter for convenience: File Explorer, This PC, Map network drive, choose a letter and
\\server\share, tick Reconnect at sign-in and, if needed, Connect using different credentials; ornet use X: \\server\share /persistent:yes. A mapped drive that shows a red X at login means the server or the credentials were not reachable when the drive was reconnected. - File Explorer navigation and network paths: type
\\serverin the address bar to browse its shares; the Network node lists discovered machines when network discovery is on; the UNC path form is\\server\share\folder.
File Explorer navigation to network paths means typing \\server\share in the address bar to browse a share without mapping it.
Local OS firewall settings
Windows Defender Firewall is on by default and blocks unsolicited inbound connections.
- Application restrictions and exceptions: Allow an app through the firewall creates a rule for a program per profile (private, public); a program that cannot receive connections (a game server, remote support, a scanner sending to the PC) needs an exception.
- Configuration: Advanced settings holds inbound and outbound rules by port, program, or service, per profile; the firewall can be turned off per profile (a troubleshooting step, not a fix). Group Policy pushes firewall rules in a domain.
Client network configuration
On the adapter's properties (Internet Protocol Version 4) or in Settings, Network and Internet, edit IP assignment:
- IP addressing scheme: the address and its subnet mask (which decide the local network), the gateway (the router's address, on the same subnet), and DNS settings (usually the domain controller inside a domain, or the router or a public resolver at home).
- Static versus dynamic: dynamic (obtain automatically) uses DHCP and suits laptops and most desktops; static addresses are typed in for servers, printers, and devices others must find, and must be excluded from the DHCP scope. An alternate configuration can provide a fallback static address when DHCP fails.
A wrong mask or gateway isolates the machine; a wrong DNS server breaks names while addresses still work.
This is the client's Internet Protocol (IP) addressing scheme: static or dynamic, with the address, subnet mask, gateway, and DNS servers.
Establishing connections
- VPN: Settings, Network and Internet, VPN, Add a VPN connection: provider, server address, type (IKEv2, L2TP/IPsec, SSTP, or a vendor client), sign-in method; connect from the taskbar network icon. Split tunneling is a setting on the connection's advanced properties.
- Wireless: pick the SSID, enter the passphrase, or for enterprise networks the username and password and certificate; manage known networks to forget a stale profile.
- Wired: plug in; the adapter negotiates speed and duplex and asks DHCP.
- WWAN (cellular): a laptop with a cellular modem needs a SIM or eSIM, the carrier's APN settings, and a data plan; treat it as a metered connection.
The exam groups these as establish network connections: VPN, wireless (WLAN), wired, and wireless wide area network (WWAN) cellular.
Proxy settings
A proxy fetches web content for clients. Configure it under Settings, Network and Internet, Proxy: automatic detection (WPAD), a setup script (PAC file URL), or manual address and port with exceptions for local addresses. The same setting sits in Internet Options, Connections, LAN settings. A machine that browses at home but not at work usually needs the work proxy; one that fails at home may have a leftover manual proxy.
Public versus private network
When Windows joins a new network it asks whether it is public or private. Public (default): network discovery and file sharing off, the firewall at its strictest; for coffee shops and airports. Private: discovery and sharing on, for home and office. A PC that cannot be seen or reached by other machines on the LAN is often sitting on the public profile. Domain networks use a third, domain profile automatically.
Metered connections and limitations
Marking a connection metered (Wi-Fi or cellular) tells Windows to limit background data: updates download only the critical ones, apps pause syncing, and tiles and mail refresh less. Use it on a hotspot or a capped plan; forget to unmark it and the machine stops updating.
Windows Networking on the Client, explained slowly
A client on a network, step by step
Joining a Windows PC to a network has an order: identity (domain or workgroup), addressing (static or DHCP), firewall profile, then the resources it uses (shares, printers, mapped drives) and the paths it takes (VPN, proxy, cellular). Performance-based questions walk through exactly these screens.
Identity: domain or workgroup
workgroup domain joined accounts local on each PC Active Directory, central policy local Group Policy per machine GPOs from domain controllers sharing matching local accounts or a shared password permissions by domain groups edition any Pro or above requirement none DNS pointing at a domain controller, an account allowed to join how System, Rename this PC (advanced), Change, Member of: Workgroup Member of: Domain, credentials; or Settings, Accounts, Access work or school, Join this device to a local Active Directory domain
After joining, users log in as DOMAIN\user or user@domain; the machine gets a computer account and policies at the next restart.
Addressing: the four fields
field purpose wrong value symptom IP address the host's identity on the subnet duplicate warning; wrong subnet isolates it subnet mask which addresses are local cannot reach some neighbors or the gateway gateway the router for everything not local LAN works, internet and other subnets do not DNS server names to addresses ping an address works, ping a name fails
Set them on the adapter (Network and Sharing Center, Change adapter settings, Properties, Internet Protocol Version 4) or in Settings, Network and Internet, the adapter, IP assignment, Edit. Dynamic (DHCP) for clients; static for servers, printers, and network devices, with the addresses excluded from the DHCP scope. The Alternate Configuration tab supplies a static fallback when DHCP is unavailable.
Shared resources and paths
task how browse a server's shares File Explorer address bar: \\server open a share \\server\share (UNC path) map a drive with the GUI This PC, Map network drive, letter, path, Reconnect at sign-in, Connect using different credentials map a drive at the command line net use X: \\server\share /user:domain\name /persistent:yes remove a mapping net use X: /delete add a shared printer Devices and Printers, Add a printer, or open \\server and double-click the printer share a folder from a PC Properties, Sharing, Advanced Sharing; then NTFS Security permissions
Network discovery must be on (private profile) for machines to appear under Network; typing the UNC path works even when discovery is off.
Firewall
need action let an application receive connections Allow an app through Windows Defender Firewall; tick Private and, if needed, Public open a port for a service with no app entry Advanced settings, Inbound Rules, New Rule, Port, TCP or UDP, number, Allow, profiles block an application from calling out Advanced settings, Outbound Rules, New Rule, Program, Block troubleshoot "is the firewall the problem?" turn it off for one profile briefly, test, turn it back on, then write the correct rule
Profiles: Domain (automatic when joined), Private, Public. Rules apply per profile, which is why a program works at the office and not at the coffee shop.
Connections
type setup typical problem VPN Settings, Network and Internet, VPN, Add: provider, server, type (IKEv2, L2TP/IPsec with a pre-shared key, SSTP, PPTP legacy), sign-in; connect from the network flyout cannot reach internal servers: not connected, split tunnel, or DNS; drops: idle timeout wireless pick the SSID; personal passphrase, or enterprise username, password, certificate; Manage known networks to forget wrong password saved: forget and rejoin; hidden SSID: connect manually wired plug in; check the link light; DHCP no link: cable or port; APIPA: DHCP WWAN Settings, Network and Internet, Cellular; SIM or eSIM, carrier APN, data plan; mark as metered no service: SIM, APN, plan, airplane mode
Proxy, profile, metered
Proxy: Settings, Network and Internet, Proxy: Automatically detect (WPAD), Use setup script (a PAC URL), or Manual (address, port, exceptions, bypass for local). Network profile: Public (discovery and sharing off, strict firewall) for untrusted networks; Private (discovery and sharing on) for home and office; change it in the network's properties. Metered: on Wi-Fi or cellular properties; limits background data and updates; used for hotspots and capped plans.
Worked examples
- A new PC on the office network cannot see the file server under Network but can open \\server. Discovery is off because the profile is Public; switch to Private.
- A laptop browses at the office and fails at home with "proxy server refusing connections." A manual proxy is set; switch to automatic detection at home or use the company's PAC script that handles both.
- A mapped drive shows a red X every morning until the user double-clicks it. The drive reconnects before the VPN or network is ready; add a logon script that maps it after a delay, or the domain's Group Policy drive mapping with reconnect.
- A remote user connected to the VPN cannot open the intranet by name but can by IP. The VPN connection's DNS is not set to the internal server; fix the VPN adapter's DNS or the split-tunnel DNS settings.
- A user on a cellular laptop burns through the plan. Mark the cellular connection metered; pause sync.
How the exam asks it
- "Which edition is required to join a domain?" Pro or higher.
- "A PC can reach local devices but not the internet. Which setting is most likely wrong?" Default gateway.
- "Which command maps drive X to a share and reconnects at login?" net use X: \\server\share /persistent:yes.
- "Users cannot connect to a service on a workstation. What should be configured?" A firewall exception for the application or port.
- "Which network profile disables discovery and sharing?" Public.
- "A user on a hotspot wants to limit updates." Metered connection.
- "Which connection type uses a SIM in a laptop?" WWAN (cellular).
What to memorize
- Domain (Pro, central accounts, DNS at the DC) versus workgroup (local accounts).
- The four address fields and the symptom of each being wrong; static for servers and printers.
- UNC paths, Map network drive, net use syntax; sharing plus NTFS permissions.
- Firewall exceptions per profile; VPN setup fields; wireless, wired, WWAN; proxy modes; public versus private; metered connections.