Section 8: Network Profiles · Complete Computer Internals

The Big Picture: Home, Cafe, or Office?

You trust your home Wi-Fi more than the free Wi-Fi at an airport. Windows does too. It gives every network a profile (also called a network location), and the profile changes how open or locked-down the PC is. The firewall (Section 7) uses the profile to pick its rules.

8.1 Domain, Private and Public Profile Differences

Profile	Meant for	How Windows treats it
Public	Cafes, airports, hotels, any network you do not trust	Most locked down. The PC hides itself: network discovery and file sharing are off, and stricter firewall rules apply
Private	Your home or a trusted small office	More open. Discovery and sharing can be turned on; Private firewall rules apply
Domain	A company network joined to an Active Directory domain	Set by company policy. An administrator controls the rules

Network discovery means "my PC can see other devices on the network, and they can see my PC". It is handy at home (printers, media boxes) and unwise in a cafe.

What changes with the profile:

Thing	Public	Private
Network discovery	Off	Can be on
File and printer sharing	Off	Can be on
Which firewall rules apply	The Public profile rules	The Private profile rules
Other PCs can see you	No	Yes (if discovery is on)

Each profile has its own firewall settings. So an app allowed on Private only is still blocked when you move to a Public network. The firewall always acts on the active profile.

Seeing the profile:

Get-NetConnectionProfile

The output shows, for each connection, the Name (the network's name), the InterfaceAlias (which adapter), the NetworkCategory (Public, Private or DomainAuthenticated), and often whether it has IPv4Connectivity or IPv6Connectivity (for example Internet).

In the Settings app (Windows 11: Settings → Network & internet → Wi-Fi or Ethernet → your network), the profile choices appear as Public network (Recommended) and Private network. The wording differs a little in Windows 10.

Tip: Choose Public unless you are sure the network is yours. A wrong "Private" label on an untrusted network makes your PC easier to see and probe.

Windows tip: A PC joined to a company domain shows DomainAuthenticated when it is on the company network, and Public or Private when you take it home. That is why a work laptop can behave differently at home.

8.2 Profile Detection Logic

Who decides: Two Windows services work together:

Service	Short name	Job
Network Location Awareness	`NlaSvc`	Collects facts about each network and works out its identity
Network List Service	`netprofm` (display name "Network List Service")	Keeps the list of known networks and their profile choices

Check the first one:

Get-Service NlaSvc

How a profile is chosen (simplified):

  New network detected (cable plugged in / Wi-Fi joined)
          │
          ▼
  NlaSvc gathers facts: gateway MAC, SSID (Wi-Fi name), DNS suffix,
  can this PC reach its company domain controller?
          │
          ├── Domain controller reached ──► Domain profile
          │
          ├── Network seen before ────────► use the saved choice
          │
          └── New network ────────────────► ask / default to Public
                                            (you may change it to Private)

Details worth knowing:

A network you have used before is remembered, so the profile returns when you come back.
On a new network, Windows normally starts with Public (the safe choice), and you can change it to Private yourself.
A network is recognised by facts such as the Wi-Fi name and the gateway's MAC address. (Hedge: the exact checks differ with the network type.)
Connectivity checks: Windows also tests whether a network really reaches the internet by contacting a small Microsoft test address. If that fails, the icon may show "No internet" even when you have an IP address. (Windows 10/11 call this the Network Connectivity Status Indicator; hedge: names and addresses can change.)
If the network changes (you plug in a second adapter, connect a VPN), each connection gets its own profile.

Windows tip: In Event Viewer, under Applications and Services Logs → Microsoft → Windows → NetworkProfile → Operational, you can see entries about networks Windows has connected to and their profile. (Hedge: the log may be empty or named slightly differently on your PC.)

Summary

Term	Plain meaning
Network profile / location	A label (Public, Private, Domain) that sets how open the PC is
Public	Untrusted network: locked down, hidden
Private	Trusted home or office: discovery and sharing allowed
Domain	Company network: rules set by an administrator
Network discovery	Letting devices on the network see each other
`NlaSvc`	Network Location Awareness; works out which network this is
Network List Service	Remembers networks and their profiles
`Get-NetConnectionProfile`	Shows the profile of each connection