Public/Private Networks Multiple NIC

[Guest]

Is it possible to keep a "Private" network ( NIC for local LAN) and a
"Public" network (NIC for Internet (WAN)) Nic's with Vista's Network
Discovery turned on for only the private network?

By defualt when this is done Vista to turns on "Network Discovery" for Both
enviroments and we no longer have a "public" Firewall setting for the WAN
connection (or Internet).
More info:
1st: mulitple computers systems in a local lan with internal Static IP
address / subnet no gateway ip used for file and print sharing Only
"Private". (NIC Protocals on for File/Print Sharing MS Networks: Client for
MS Network (tried with other IP6 off)
2nd: each computer also has an additional Network card (does not matter if
wireless or wired) used to get Internet from DCHP internet router "Public"
access. (NIC Protocals off for File/Print Sharing MS Network ; Clients for
MS Network (tested even with all off except TCP/IP4 & QOS Packets)
3rd: Problem: Inorder to access LOCAL AREA computers on "Private" you
must Turn On Vista Discovery.
After doing this Vista allows access to your machine via the Public
connection and also you can access other computers via the Public connection.

Yes we can Password the Shares but we would like not to have the machines
show up at all in the Public Network.

This was controlled in Previous Windows versions by disabling Protocal's and
Gateways for multihomed computer.

This Question has been posted several times through Vista Help Communities
and Discussion Groups but has yet to be answered. Can we get this to work?
I have looked into Group Policies but requires numerous changes and has
potiental of support issues as machines age and evolve.

Windows Vista Business and Ultimate versions tested with mixed Networks of
2-3 machines of variations of at least 1 Vista machine and other XP Pro /
Home machines (no domains) XP machines do not allow access via Public
connections. I seem to be missing some aspect of Multihomed Vista
Requirements.

Thank you for any help support

 

[Steve Riley [MSFT]]

A profile is defined for the entire computer, not for individual network
interfaces. Here's the sequence the computer uses to determine which profile
to use:

1. Examine all connected networks.
2. Is an interface in a network previously defined as public? If yes, then
set computer profile to public and exit.
3. Is an interface in a network previously defined as private? If yes, then
set computer profile to private and exit.
4. Did a computer domain logon occur over any interface? If yes, then set
computer profile to domain and exit.
5. Otherwise, set computer profile to public and exit.

The goal is to make sure that the computer is in the safest mode possible.

 

[Guest]

Thank you for that clarification of Computer Profile.
Using that perspective, then it is not possible (or maybe simple) to define
a different Profile for each individual network interface. Is that True?
If so, then I believe then to accomplish this task (*original question) we
must implement a shared Private Network interface for all computers and
provide a separate firewall device for internet via the same Network
interafce. (which we presently have additional disadvantages for routing 3rd
party application though two firewall devies) But...

Or could you provide a diiferent suggestion? (Option)

The senario: Has been a common means of network configuration with previous
Windows version for such office as a realitor's office whom share a wireless
internet access for the entire office of agents. A Second Network interface
was used to for their own systems to network file & print share with thier
personnal laptop and desktop computers.

I guess this "computer profile" overiding all Network interface in vista was
not understood by us prior to this.
Thank you for any assistance and/or suggestion for this.

 

[Steve Riley [MSFT]]

No, in Vista there's no way to have individual profiles for each interface.
We understand there are reasons for doing this, though, so we're looking at
providing that in the future. I'm not sure when, exactly.

--
Steve Riley
(e-mail address removed)
http://blogs.technet.com/steriley
http://www.protectyourwindowsnetwork.com