Objective 1.7: Given a scenario, configure Microsoft Windows networking features on a client/desktop
Cert: CompTIA A+ Core 2 (220-1202) V15 Domain: 1.0 Operating Systems Weight: Part of the 28% Operating Systems domain Depth: Given a scenario, configure. The candidate must set up Windows networking properly for domain, workgroup, VPN, wired, wireless, and metered scenarios.
What this objective tests
You should be able to configure a Windows PC's network identity (domain vs workgroup), share and connect to network resources, set up VPN/Wi-Fi/cellular connections, configure local firewall rules, set IP addressing and DNS, manage proxy settings, and understand the difference between public and private network profiles.
This is where Windows-as-a-network-client meets the Core 1 networking content. The IP/DNS/gateway concepts come from Core 1; how Windows applies them is here.
Key facts
Domain joined:
- PC is a member of an Active Directory domain. Authenticates against domain controllers, receives Group Policy, can access domain-secured shares and printers.
- Domain join requires Windows Pro or higher. Set up in Settings > Accounts > Access work or school, or via the legacy System Properties > Computer Name.
Workgroup:
- Peer-to-peer network model. Each PC manages its own user accounts. Suited to small offices and home networks.
- Available on all Windows editions including Home.
- Default workgroup name is WORKGROUP. Changing it doesn't add security; it's an organizational label.
Shared resources:
- Files, folders, and printers that a PC makes available to other devices on the network.
- File and Printer Sharing must be enabled in Network and Sharing Center for shares to be reachable.
Printers (shared):
- Right-click a printer in Devices and Printers > Properties > Sharing tab to share it.
- Network discovery and file sharing must be on for the shared printer to appear on other PCs.
File servers:
- Centralized storage exposed via SMB (Server Message Block) on Windows. Mapped as network drives or accessed via UNC paths.
Mapped drives:
- Assign a drive letter to a network share so it appears in File Explorer like a local drive.
- Map via right-click This PC > Map network drive, or via
net use Z: \\server\share. - "Reconnect at sign-in" makes the mapping persistent across reboots.
Virtual Private Network (VPN):
- Encrypted tunnel between the PC and a corporate or service-provider VPN server. PC appears to be on the remote network.
- Built-in Windows VPN client supports PPTP (deprecated), L2TP/IPsec, SSTP, IKEv2.
- Most modern corporate VPNs use dedicated clients (Cisco AnyConnect, GlobalProtect, FortiClient) instead of the built-in Windows client.
- Set up in Settings > Network & Internet > VPN.
Wireless (Wi-Fi):
- Settings > Network & Internet > Wi-Fi. Connect to SSIDs, manage known networks, set up Wi-Fi Direct.
- Click "Manage known networks" to remove a network or change its profile.
Wired (Ethernet):
- Settings > Network & Internet > Ethernet. Configure IP settings per adapter.
Wireless Wide Area Network (WWAN) / Cellular:
- 4G LTE or 5G connection via a cellular modem (built into some laptops or via a USB modem).
- Settings > Network & Internet > Cellular. Manage data usage, set as metered.
Internet Protocol (IP) addressing scheme:
- IPv4 (192.168.1.50) and IPv6 (2001:db8::1) configurable per adapter.
- Set in Adapter properties > Internet Protocol Version 4 (TCP/IPv4) > Properties.
Domain Name System (DNS) settings:
- Configure preferred and alternate DNS servers per adapter.
- Override DHCP-supplied DNS by setting "Use the following DNS server addresses."
Subnet mask:
- Defines the network portion of an IP address (e.g., 255.255.255.0 for a typical /24 network).
- Must match the network the PC is on; wrong subnet mask = can't reach local network correctly.
Gateway:
- Default gateway = the router IP for traffic destined off-network.
- Set per adapter; usually supplied by DHCP.
Static IP:
- IP, subnet mask, gateway, and DNS configured manually on the PC.
- Used for devices that need consistent addressing without depending on a DHCP reservation: some servers, some printers, some specialty hardware.
Dynamic IP (DHCP):
- IP, subnet, gateway, and DNS assigned automatically by a DHCP server (usually the router).
- Default for client PCs. Easier to manage at scale.
Local OS firewall settings:
- Windows Defender Firewall blocks inbound by default, allows outbound by default.
- Configured in Control Panel > Windows Defender Firewall or Settings > Privacy & Security > Windows Security > Firewall & network protection.
- Advanced rules (per-program, per-port, per-protocol) in Windows Defender Firewall with Advanced Security (wf.msc).
Application restrictions and exceptions:
- "Allow an app through firewall" creates exceptions for specific programs.
- Block all incoming connections is the lockdown mode (overrides exceptions).
- Per network profile (Public/Private/Domain), so rules can differ on home Wi-Fi vs office LAN.
Firewall configuration:
- Inbound rules (what can reach this PC), outbound rules (what this PC can reach), connection security rules (IPsec/encryption requirements).
- Most user-facing rules are inbound. Outbound rules are useful for restricting telemetry or known-bad outbound traffic.
Proxy settings:
- Windows-level proxy: Settings > Network & Internet > Proxy. Configure auto-detect (WPAD), setup script (.pac URL), or manual proxy server/port.
- Used in corporate environments to route web traffic through a proxy/filter.
- Some apps respect Windows proxy settings; some have their own.
Public network:
- Hide this PC. File Explorer network browsing off. File and printer sharing off. Strict firewall.
- Default for new networks Windows doesn't recognize (coffee shops, hotels).
Private network:
- Discoverable. File and printer sharing on. Network browsing on. Firewall more permissive.
- Use for home and trusted office networks.
Domain network (domain-joined PCs):
- Automatic profile when connected to the network where the domain controllers are reachable.
- Group Policy may configure firewall and sharing settings specifically for the domain profile.
File Explorer network paths:
- UNC paths:
\\server\shareor\\server\share\subfolder. - Enter directly in the File Explorer address bar to browse network shares without mapping a drive.
- Useful when you need one-off access to a share without permanent mapping.
Metered connections:
- Mark a network as metered to tell Windows it's bandwidth-limited.
- Reduces background data: Windows Update defers, OneDrive syncs less, some Store apps stop pulling updates.
- Set per network: Settings > Network & Internet > [network] > Set as metered.
- Cellular connections are metered by default.
Common gotchas
- Trying to domain-join a Home edition PC. Doesn't work. Upgrade to Pro first.
- Wrong default gateway. PC reaches local network fine but not the Internet. Gateway is incorrect or missing.
- DNS server set to a stale internal IP. PC can ping by IP but can't resolve hostnames. Update or set to public DNS for testing (8.8.8.8).
- Network profile set to Public on a domain network. File sharing and printer discovery break. Switch to Private or Domain.
- VPN connected but Internet appears broken. Split tunneling not configured; all traffic routes through VPN, slow or blocked. Check VPN client routing or full-tunnel behavior.
- Mapped drive disappears after reboot. "Reconnect at sign-in" wasn't checked. Or the user account isn't a member of the domain (Pro PC, no domain, mapped via different creds).
- Proxy required but not configured. Browser works (manual proxy in the browser), but the rest of the OS doesn't reach the Internet (Windows Update, Store, app installers). Configure the proxy at OS level too.
- Metered connection flag missed on cellular hotspot. Windows Update tries to pull a 4 GB feature update over the user's phone hotspot, blowing their data cap.
Real-world context
Office onboarding checklist for a new Windows PC:
- Verify edition supports domain join (Pro+).
- Join the domain via Settings > Accounts > Access work or school.
- Verify Group Policy is applying (gpresult /r).
- Map standard network drives via login script or manually with persistence.
- Verify printers populated from print server.
- Confirm Windows Defender Firewall profile is Domain (not Public).
- If VPN required: install the corporate VPN client and test connection.
- If on cellular fallback: mark cellular profiles as metered.
Common helpdesk fixes:
- "Network shows as Public on my office Wi-Fi." Change to Private (or Domain). Network and Sharing Center > active network > Properties.
- "Can't reach \\fileserver." Check ping by name, ping by IP, then try the UNC path. Look at firewall (SMB inbound on the server, outbound on the client). Verify credentials.
- "Outlook authentication keeps prompting." Domain credentials issue. Verify the PC is actually domain-joined and the user account is enabled in AD.
- "Browser works but other apps don't reach the Internet." Check OS-level proxy settings.
Sources
- [CompTIA A+ 220-1202 Exam Objectives Version 4.0, Section 1.7](../../../../../../30-RevyTechJourney/CompTIA%20A%2B%20220-1202%20Exam%20Objectives%20%284.0%29.pdf)
- [Microsoft Learn: Join a computer to a domain](https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/operations/join-a-computer-to-a-domain)
- [Microsoft Learn: Windows Defender Firewall](https://learn.microsoft.com/en-us/windows/security/operating-system-security/network-security/windows-firewall/)
- [Microsoft Learn: Network profiles](https://support.microsoft.com/en-us/windows/make-a-wi-fi-network-public-or-private-in-windows-0460117d-8d3e-a7ac-f003-7a0da607448d)
- [Microsoft Learn: Metered connections](https://support.microsoft.com/en-us/windows/metered-connections-in-windows-7b33928f-a144-b265-97b6-f2e95a87c659)
- [Microsoft Learn: VPN overview](https://learn.microsoft.com/en-us/windows/security/identity-protection/vpn/vpn-guide)
