A client computer that supports different behaviors when connected to a
private network behind a network firewall than when outside the network
firewall and connected indirectly through an access device. The client
computer is configured to attempt communication with a device on the
network. Based on the response, the client computer can determine that it
is behind the network firewall, and therefore can operate with less
restrictive security or settings for other parameters appropriate for
when the client is directly connected to the network. Alternatively, the
client computer may determine that it is indirectly connected to the
network through the Internet or other outside network, and therefore,
because it is outside the private network firewall, should operate with
more restrictive security or settings of other parameters more
appropriate for use in that network location. The described approach
operates even if the remote client computer has a direct connection to
the network that enables it to authenticate with a domain controller.