Windows 11 says connected but websites fail: isolate the layer

The Wi-Fi icon can show a connection to a router even when the internet service, DNS or one website is unavailable. Windows' network status also uses an internet check that can be affected by a captive portal or network policy. Rather than changing every adapter setting, ask four narrower questions: does another device work, does this PC have a valid local address, can it reach the gateway, and does the failure affect all destinations? The answer determines whether the next step belongs on the PC or router.

Before you start​

Note the network name, time and affected apps. Keep your VPN and proxy state recorded before temporarily testing without them. On a corporate or school network, do not override managed DNS or proxy policy. If a phone hotspot is available, use it as an independent comparison, not as proof the original router is secure.

Do it step by step​

1. Test two unrelated HTTPS websites and one app. Check another device on the same Wi-Fi. If everything fails, investigate the router and provider before editing Windows settings.
2. Open Settings > Network & internet and confirm the active adapter. In Terminal run `ipconfig /all` and note the adapter's address, default gateway and DNS servers. An automatic 169.254.x.x IPv4 address can mean DHCP did not provide a usable address.
3. Restart Wi-Fi or reconnect once and rerun Get Help's Network and Internet troubleshooter. Compare the adapter address afterward; do not claim success merely because the tool completed.
4. If local connectivity works but names fail, use `nslookup` on a known domain and record the DNS server and error. If one domain fails while others work, investigate that service before resetting the PC.
5. Check Settings > Network & internet > Proxy and any active VPN for an unintended setting. Disconnect a personal VPN only as a temporary comparison; do not disable a required organization VPN.
6. After one targeted fix, repeat the original websites, an app and a restart. Use Network reset only if the narrower checks fail and you have the details needed to rebuild VPN and virtual-network settings.

Check the result​

The PC reaches multiple independent sites and the original failing app, while the gateway and DNS configuration match the intended network. A recorded before/after result identifies the layer that changed.

If something goes wrong​

A captive portal can allow Wi-Fi association but block most internet requests until sign-in. A site-specific outage may have nothing to do with Windows. If the router gives no address to any device, fixing one laptop's DNS will not restore the network.

Know the limit​

Network reset removes adapter settings and can affect VPN or Hyper-V virtual switches, according to Microsoft. Do not use it as the first response to one unreachable page. Microsoft Wi-Fi troubleshooting ipconfig reference

Decision checkpoint​

Do not use the taskbar icon as the only measurement. A browser's cached page may load while a fresh page fails, and a captive portal may allow its own login but block ordinary traffic. Try a fresh HTTPS address and an app that needs live data. Note which one fails and which network path it used.