Block Computer from Connecting to Non-Domain Network

Use Group Policy to stop machines from connecting to non-domain networks if they're already connected to a corporate network.

John Savill

April 17, 2014

1 Min Read
road block

Q: How can I block a computer from connecting to other networks if the machine is connected to the domain network via a LAN?

A: If a machine is connected to your corporate network via a LAN, you might want to ensure that it can't also connect to another network using a wireless connection or even a second LAN connection. Edit Group Policy as follows to block other networks when connected to a domain network:

  1. Open the Group Policy Object (GPO) for the setting that's linked to the required domain or OU.

  2. Navigate to Computer ConfigurationPoliciesAdministrative TemplatesNetworkWindows Connection Manager.

  3. Double-click Prohibit connection to non-domain networks when connected to domain authenticated network, and select the Enabled setting.

  4. Click OK.

  5. Close the Group Policy Management Editor.

Refresh Group Policy on the computers that should receive the policy.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like