Windows 10 says I have no internet connection, but I have.

"Obviously* I didn't use Google DNS. It was an EXAMPLE to others."

1. In your example it reads like advice to the community.  I know your intention is good but this is problematic.

"Follow these 5 steps to reconnect your internet!

             Set "ActiveDnsProbeContent" to: 9.9.9.9"

2. In any case there is no such thing as an example for these settings.  If you are not using your own hosted probe server there is only ONE recommended setting and if you change it you run the risk of breaking your active probe.

ActiveDnsProbeHost	DNS probe host FQDN	dns.msftncsi.com
ActiveDnsProbeContent	DNS probe host IP	131.107.255.255
ActiveDnsProbeHostV6	v6 DNS probe host FQDN	dns.msftncsi.com
ActiveDnsProbeContentV6	v6 DNS probe host IP	fd3e:4f5a:5b81::1
ActiveWebProbeHost	HTTP probe host URL	www.msftconnecttest.com
ActiveWebProbePath	HTTP probe host path	connecttest.txt

"Why don't you be constructive and come up with a SOLUTION or alternate DNS address?"

As per above there is no alternate address, and I've given various advice elsewhere in this thread.  I'd love to give a one-line summary of what to do to solve every single NCSI problem in the world however that's just not possible given the multitude of ways NCSI can be disrupted.

"Why can we not turn off this stupid software that is constantly trying to detect if there is an internet connection??? Why can't it JUST USE the internet connection?? It is as if Microsoft is trying to be too smart for itself... Hmmm"

99% of the cases I've worked resolve in third-party software interfering with NCSI's ability to complete a successful probe.

One should not disable NCSI (i.e. the active probe) unless one wants to break their machine's internet connectivity detection for good.  This means that even if whatever environmental or third-party issue is the cause behind your problem is not present, detection ability will most definitely be disabled.

If you would like to work with me on uncovering the issue in your environment I would be more than happy to work with you to collect and analyze tracing from your machine.   Send me your email address to *** Email address is removed for privacy ***.  This address is not for distribution as I don't have time to work on everybody's issues on a 1:1 basis, so I will delete this address from this comment after I get your email reply.

Hi Tom Fair

Obviously* I didn't use Google DNS. It was an EXAMPLE to others.

Why don't you be constructive and come up with a SOLUTION or alternate DNS address?

Instead ask me for diagnostic data or specific error codes from my logs before they are overwritten.

I searched for "msftncsi.com" and is not in my Hosts file. Not in AdGuard filters.

Disabling these does not make any change to Internet access (LAN IP diagnostic tools still respond fine, but not outside of LAN):

• Kaspersky security cloud
• Adguard
• Windows Firewall Control (WFC)
• Windows Defender Firewall
• Windows Defender 

Restarting dozens of network services under "services.msc" has no effect. 

See disabled services below...

WiFi network protocols and drivers that are enabled are:

• Client for MS Networks
• File and Printer Sharing
• NordVPN Lightweight Firewall
• QOS Packet Scheduler
• Bridge Driver
• Internet Protocol TCP/IPv4 (NB. All Auto. NB. Disabled IPv6 as is off on router)
• Link-Layer xyz Responder
• Link-Layer xyz Mapper I/O Driver

VPN connections? Once internet working no issues with connected, suspended, connected. So I disconnect and wait until issue occurs. VPN is already disconnected, exited. So to double-test I disable VPN from start-up, disable service, reboot and try again - NO difference! Still no internet!

I occasionally get this error in Yandex Browser (Chromium-based , more secure and feature-rich over Chrome!):

DNS_PROBE_FINISHED_NO_INTERNET

Or that there is no connection to the internet. Or I am not connected. All these show the globe network status icon.

Why can we not turn off this stupid software that is constantly trying to detect if there is an internet connection??? Why can't it JUST USE the internet connection?? It is as if Microsoft is trying to be too smart for itself... Hmmm

VISUAL CHANGES WHEN YOU KNOW AN ISSUE OCCURS

The WiFi icon changes from a signal strength icon to a globe and is "Limited".

If I switch from 2G to 5G or to Guest WiFi there is no difference.

SIDE-EFFECTS FROM VISUAL CHANGE

All Microsoft Store apps and Microsoft software apps stop working. Examples? Outlook will refuse to send and receive all IMAP, POP, SMTP accounts. Windows store apps: Spotify and Whatsapp apps will cease working.

WHAT WORKED IN THE PAST? WHAT HAS NOT?

Usually time. Starting up the computer *sometimes* displays the globe network icon. Currently (past week) when the computer turns on, it displays the WiFi signal strength and then after some time it reverts to the globe. Or other times it would only stop working after hibernating or going into standby (I forget which).

Rebooting does *not* solve the problem.

Resetting network config does *not* solve the problem. 

Downgrading network drivers does *not* solve the problem.

Using generic Microsoft drivers does *not* solve the problem.

WHAT WORKED TODAY?

However, today I connected to my 4G hotspot and "Viola" - internet was back and WiFi signal strength icon had returned!  Strange as switching local WiFi networks does not. Hmmmm

THOUGHTS? BEHAVIOUR + ASSUMPTIONS

So I think this could be a service issue, or a "something" issue (insert appropriate word).  There must be something we can do to poll the network stack, network library files, etc.? The problem only began after the last major Windows update, I've seen hundreds of other posts and others talking about. :P

The issue is Microsoft just isn't doing their job! If you sell software you need to first troubleshoot and Be proactive. Collect data. Capture logs. Reproduce issues. Publicise a solution!

Thank you for everyone's help! :D :) :P

DEFAULT W10 19042 REGISTRY SETTINGS:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\NlaSvc\Parameters\Internet]

"ActiveDnsProbeContent"="131.107.255.255"

"ActiveDnsProbeContentV6"="fd3e:4f5a:5b81::1"

"ActiveDnsProbeHost"="dns.msftncsi.com"

"ActiveDnsProbeHostV6"="dns.msftncsi.com"

"ActiveWebProbeContent"="Microsoft Connect Test"

"ActiveWebProbeContentV6"="Microsoft Connect Test"

"ActiveWebProbeHost"="www.msftconnecttest.com"

"ActiveWebProbeHostV6"="ipv6.msftconnecttest.com"

"ActiveWebProbePath"="connecttest.txt"

"ActiveWebProbePathV6"="connecttest.txt"

"CaptivePortalTimer"=dword:00000000

"CaptivePortalTimerBackOffIncrementsInSeconds"=dword:00000005

"CaptivePortalTimerMaxInSeconds"=dword:0000001e

"EnableActiveProbing"=dword:00000001

"PassivePollPeriod"=dword:0000000f

"StaleThreshold"=dword:0000001e

"WebTimeout"=dword:00000023

Network Diagnostics:

C:\Users\Rebecca>ping dns.msftncsi.com

Pinging dns.msftncsi.com [131.107.255.255] with 32 bytes of data:

Request timed out.

....

Ping statistics for 131.107.255.255:

    Packets: Sent = 2, Received = 0, Lost = 2 (100% loss),

Control-C

^C

C:\Users\Rebecca>ping www.msftconnecttest.com

Pinging 4-c-0003.c-msedge.net [13.107.4.52] with 32 bytes of data:

Reply from 13.107.4.52: bytes=32 time=7ms TTL=121

....

Ping statistics for 13.107.4.52:

    Packets: Sent = 2, Received = 2, Lost = 0 (0% loss),

Approximate round trip times in milli-seconds:

    Minimum = 7ms, Maximum = 11ms, Average = 9ms

Doing the test at https://ipvoid.com or https://mx****/SuperTool.aspx gives the following results - I get the SAME results! Go figure! 

PING dns.msftncsi.com(fd3e:4f5a:5b81::1 (fd3e:4f5a:5b81::1)) 56 data bytes

--- dns.msftncsi.com ping statistics ---

3 packets transmitted, 0 received, 100% packet loss, time 2037ms

PING 4-c-0003.c-msedge.net (13.107.4.52) 56(84) bytes of data.

64 bytes from 13.107.4.52 (13.107.4.52): icmp_seq=1 ttl=119 time=13.2 ms

64 bytes from 13.107.4.52 (13.107.4.52): icmp_seq=2 ttl=119 time=13.3 ms

64 bytes from 13.107.4.52 (13.107.4.52): icmp_seq=3 ttl=119 time=13.5 ms

--- 4-c-0003.c-msedge.net ping statistics ---

3 packets transmitted, 3 received, 0% packet loss, time 2003ms

rtt min/avg/max/mdev = 13.279/13.402/13.544/0.144 ms

Thanks for everyone's time. Cheers! :D

Re: default settings

This?

      "and... Set "ActiveDnsProbeContent" to: 9.9.9.9

• Set "ActiveDnsProbeContentV6" to: 2620:fe::9
• Set "ActiveDnsProbeHost" to: dns.google
• Set "ActiveDnsProbeHostV6" to: dns.google"

If changing these fixed your problem, that only means something was wrong with your original DNS server resolving dns.msftncsi.com.

That is bandaiding the real problem.

And now you're dependent on Google.  Should they change anything you're broken again. 

The default settings out-of-the-box install are what should work for the vast majority of installs.

If they do not, then it's an environmental issue caused by a DNS, proxy server, VPN config, or many of the other things I've discussed in this thread.

We're not going to change our default settings to be dependent on resolving a third party domain for obvious reasons.

If users' DNS servers have problems resolving the proper, recommended, and well-published addresses (msftncsi.com) that's a problem with that DNS server, not NCSI....and that's what needs to be investigated.

Where are you doing this??

Pihole? Are you using Windows?

Are you talking about a Firewall allow rule?

Try and use proper Spanish grammar and punctuation. Write in short sentences. Then translator will be more accurate! :D

Thanks mate!

Google translation: 

It helped a lot. Thank you. I had problems with Pihole Windows always told me that I did not have internet I whitelisted (. | ^) Msftncsi \ .com $ and solved.