Private network ranges for apps: registry value DomainSubnetsComputerHKLM\SOFTWARE\Policies\Microsoft\Windows\NetworkIsolation

Policy ID
WF_NetIsolation_PrivateSubnet
Scope
Computer Configuration
Supported on
At least Windows Server 2012, Windows 8 or Windows RT
Source
Administrative Templates (.admx) for Windows 11 2026 Update (26H2) (version 1.0)
Category
Network › Network Isolation

Registry

DomainSubnets

REG_SZComputer
Enabled value
Depends on the option value
Element
Private subnets
Value type
REG_SZ
Required
true
Maximum length
16383
Apply with .reg · CMD · PowerShell
.reg
Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SOFTWARE\Policies\Microsoft\Windows\NetworkIsolation]

; Value names and types follow the ADMX. Replace <enter value> below with your own data
"DomainSubnets"="<enter value>"
CMD
:: Value names and types follow the ADMX. Replace <enter value> below with your own data

reg add "HKLM\SOFTWARE\Policies\Microsoft\Windows\NetworkIsolation" /v "DomainSubnets" /t REG_SZ /d "<enter value>" /f
PowerShell
# Value names and types follow the ADMX. Replace <enter value> below with your own data

New-Item -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\NetworkIsolation' -Force | Out-Null
New-ItemProperty -Path 'HKLM:\SOFTWARE\Policies\Microsoft\Windows\NetworkIsolation' -Name 'DomainSubnets' -PropertyType String -Value '<enter value>' -Force | Out-Null