Duplicate Domain Network Profiles Being Created

RJames2010 36 Reputation points
2020-08-26T16:10:47.79+00:00

This was on Technet but I'm still seeing this issue. From Technet:

https://social.technet.microsoft.com/Forums/en-US/6b155a0a-d899-4359-865d-40e99c298a4d/duplicate-domain-network-profiles-categorized-as-quotpublicquot?forum=win10itpronetworking#019023a3-a60a-45f8-93b2-fe617dd0853e

In doing some troubleshooting I have found that our computers have duplicate network profiles for the domain network but they are categorized as "Public" networks instead of domain.
I believe this is affecting RDP sessions. A user will get disconnected from RDP and then not be able to get back in. In the Network Profile event log, I can see that the network profile is frequently changing despite the machines being hardwired desktops. I believe that when the network profile changes to one of the "our.domain.com" profiles that are categorized as "Public," the user gets kicked off due to the firewall rules which block RDP over non-domain networks.
Under HKLM:\SOFTWARE\Microsoft\Windows NT\Current Version\NetworkList\Profiles there are a series of keys with GUIDs for names.
Under each of these keys are several properties and here is where I noticed that under one GUID, the description would be "our.domain.com", the value for the Managed property would be 1 (i.e. managed) and the value for the "Category" property would be 2 (i.e. domain). This is correct and as it should be.
I find, however, that there are 1-3 other GUIDs that have a description of "our.domain.com" and have a Managed value of 1 but have a Category of 0, (i.e. Public) This is not correct and I believe is the source of some RDP issues since the firewall will block RDP connections from anything but a "Domain" profile.
Does anyone know where these come from and how to keep them from coming back?

I have been collecting data on these "rogue" network profiles via SCCM and a custom WMI Class and what I've found is that delaying the start of the NLA service does not significantly change how often these profiles are created. I'm hoping someone is able to give me some suggestions on what else I can take a look at.

Thanks!

WB

Windows 10 Network
Windows 10 Network
Windows 10: A Microsoft operating system that runs on personal computers and tablets.Network: A group of devices that communicate either wirelessly or via a physical connection.
2,346 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Anonymous
    2020-08-26T16:49:43.757+00:00

    have found that our computers have duplicate network profiles

    Are the pcs multi-homed? Please provide a screenshot.

    0 comments
  2. Gloria Gu 3,896 Reputation points
    2020-08-27T05:55:34.457+00:00

    Hi,

    In regards to your issue, I've tested in my environment. It is the same as you discribed in the regedit deitor when connecting public network& domain network. So it confirmed your conception of the 'source of some RDP issues '.
    20707-2.png
    20696-3.png
    20697-4.png
    20763-5.png

    I want to confirm that do the PCs with the wrong net profile join the domain? Under this situation, my suggestion would be that you can try to modify the Category to 2 and refresh your net profile by using Powershell command Get-NetConnectionProfile.

    The following link is a case with win7 has the similar symptom like you.
    the-network-location-profile-changes-from-domain-to-public-in-windows
    The problem was solved by downloading the update package. You can also download the latest package of your system in:
    Search.aspx

    -------If my answer is helpful to you, please remember to mark them as answer. Thank you!------

    Regards
    Gloria

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.